="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1899.801866] audit: type=1326 audit(1752942898.834:5711): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=812277 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:34:58 executing program 2: syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) [ 1899.828492] audit: type=1326 audit(1752942898.834:5712): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=812277 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1899.862314] audit: type=1326 audit(1752942898.843:5713): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=812281 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb39701eb19 code=0x7ffc0000 [ 1899.882356] audit: type=1326 audit(1752942898.846:5714): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=812277 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:34:59 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 16:34:59 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r5, &(0x7f0000000280)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x7, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x0, &(0x7f0000000400)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:34:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:34:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:34:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1, 0x0, 0x0) [ 1900.047070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:34:59 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 16:34:59 executing program 6: r0 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfef}, 0x40040, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) setresuid(0xffffffffffffffff, 0x0, 0x0) 16:34:59 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a08020000010000010101", 0xaa, 0xb800}], 0x0, &(0x7f0000000080)={[{@unhide}]}) openat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 16:34:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x1c}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:34:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1900.282168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1900.301061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:34:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:34:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80071, 0xffffffffffffffff, 0x8000000) [ 1900.626222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:34:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x1d}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:34:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="50f2", 0x2}], 0x1}}], 0x1, 0x4810) 16:34:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x87) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:34:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:34:59 executing program 3: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x2, &(0x7f00000002c0)=""/129, 0x81) 16:34:59 executing program 6: getpid() r0 = epoll_create(0x3) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 16:34:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:34:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:34:59 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) 16:35:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\xf0'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x30}}, 0x0) [ 1900.950049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:35:00 executing program 5: r0 = semget$private(0x0, 0x4, 0x100) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x1000}], 0x1) semop(r0, &(0x7f0000000080)=[{0x1, 0x2}, {0x4, 0x3, 0x1800}], 0x2) r2 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r2, 0x0, 0xb) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r2, &(0x7f00000001c0)=[{0x3, 0x52e5, 0x1000}, {0x4, 0x40, 0x1800}, {0x4, 0xffd3}], 0x3, &(0x7f0000000180)={r3, r4+60000000}) r5 = semget$private(0x0, 0x4, 0x50c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ftruncate(r6, 0xffe000000000) semctl$GETPID(r5, 0x2, 0xb, &(0x7f0000000200)=""/231) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000300)=""/238) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) 16:35:00 executing program 6: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffe, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000001400)="03000000fd017cb306f326bb04efffff04000000d4000f", 0x17, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0x401}, {&(0x7f0000010e00)="ed41000000040040d7f465609ef4655fd7f4655f000000000000000200", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4000, @fd, 0x0, 0xf8, 0x80000001, 0xa, 0x1, {0x3, r2}}, 0x0) openat(r0, &(0x7f0000000300)='./file1\x00', 0x60a00, 0x15) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x50, &(0x7f00000063c0), &(0x7f0000006400)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000380)={0x0, 0xfb, 0x1015, 0x0, 0x1, "b172b4af646738e28595d989f63d20d2", "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"}, 0x1015, 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) 16:35:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4008004) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x5420, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/192, 0xc0}], 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "61a80b9ba3133313655735da598dab351c4fff"}) [ 1905.852575] Bluetooth: hci4: command 0x0409 tx timeout [ 1907.900582] Bluetooth: hci4: command 0x041b tx timeout [ 1909.948570] Bluetooth: hci4: command 0x040f tx timeout [ 1911.527636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.530123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.568323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1911.585464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.588700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.592293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1911.754896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1911.766441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1911.996575] Bluetooth: hci4: command 0x0419 tx timeout [ 1912.077808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:35:11 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x40045201, &(0x7f0000000040)) 16:35:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x49) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r1, r1) write$binfmt_elf64(r4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r4, r1, r5, 0xffffffffffffffff, r6, r1], 0x7) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x39, 0x3, 0x8}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x200f5ef, 0x0) dup2(0xffffffffffffffff, r3) 16:35:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3, 0x0, &(0x7f00000000c0)) 16:35:11 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, r4, 0x8, 0x36c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x39}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:35:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x60}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:35:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r1, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xaf2) syz_io_uring_setup(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 1912.153387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1912.242408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.244445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.247351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3e9a"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) [ 1912.259915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=':', 0x1}], 0x1}, 0x10044008) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) [ 1912.299397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x8, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000000)={0x3f, 0x8, 0x8, 0x3, 0x20}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008d7000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) flock(r4, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) 16:35:11 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, r4, 0x8, 0x36c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x39}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:35:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3e9a"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 16:35:11 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff}, 0x9) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460104000100000000000000c0030003008c01000009010000000000004000000000000000a70300000000000000800000040038000200070001010500000000700000000008000000000000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000000000000000000000300000000000000010000000000000006000000040000004f96338ba86e73dfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405e66db71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 1912.608146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1912.654833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1912.707101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1912.709114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1912.712158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:12 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a02562eec73c14c84621ffc3ec6e6228b7442170767757fcadcfd759c2ec0808c479b021d4139d892029d695e0cba5337340d6b1a9c403", 0x37, 0x8000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) splice(r2, 0x0, r1, 0x0, 0xde, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @random="fe19f36edc19"}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:35:12 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:35:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000a00)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7}, 0x0, 0x0, 0x1}, 0xffffff81) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(0xffffffffffffffff, &(0x7f00000008c0)="071e9f7358ec922343d9786f3a5ffc4951d0a6a9f38dda8a9bae8f6f3734e082993d557367e24150405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7b69b7185e6784ba4ef00"/105, 0x69) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000003c0)=""/194, 0xfffffffffffffc82}, {&(0x7f00000004c0)=""/219, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4077, 0x1000}, {&(0x7f0000000940)=""/157, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000200)='net/sco\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') unshare(0x48020200) 16:35:12 executing program 5: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 16:35:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff}, 0x9) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:35:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1913.054833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 16:35:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3e9a"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 16:35:12 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d16b114820332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e17e2cfa917e79a2a35bb2b6dbca97391"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, r4, 0x8, 0x36c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x39}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1913.081225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.096906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.157774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1913.159662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1913.162249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:35:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3e9a"], 0x1020) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 16:35:12 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, r4, 0x8, 0x36c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x39}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x9}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x800}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:35:12 executing program 5: futex(&(0x7f0000000140), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:35:12 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/180, 0xb4}], 0x1) 16:35:12 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff}, 0x9) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460104000100000000000000c0030003008c01000009010000000000004000000000000000a70300000000000000800000040038000200070001010500000000700000000008000000000000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000000000000000000000300000000000000010000000000000006000000040000004f96338ba86e73dfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405e66db71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 1913.401813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1913.421476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.430779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x204047c, &(0x7f0000000100)={[{@data_err_ignore}]}) 16:35:13 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x3, 0xffffffffffffffff}, 0x9) r2 = mq_open(&(0x7f00000007c0)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)0q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhQ\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x83, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x1}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/658], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r7, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 16:35:13 executing program 5: futex(&(0x7f0000000140), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:35:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x2}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13068cf4ada46207000062ea0b5e364eee2b1dc94c1742ea96761c683f90df00000001002000"}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="4803005c630000000000", 0xa}], 0x1}, 0x0) 16:35:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xa, 0x1b, 0x0, 0x0, @str='\x01\x01\x01\x01\x01\x01'}]}, 0x28}}, 0x0) 16:35:13 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a02562eec73c14c84621ffc3ec6e6228b7442170767757fcadcfd759c2ec0808c479b021d4139d892029d695e0cba5337340d6b1a9c403", 0x37, 0x8000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) splice(r2, 0x0, r1, 0x0, 0xde, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @random="fe19f36edc19"}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:35:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x2) [ 1913.926338] EXT4-fs (sda): re-mounted. Opts: data_err=ignore,,errors=continue [ 1913.930870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1913.943161] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 1913.959412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:13 executing program 5: futex(&(0x7f0000000140), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:35:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8826}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:35:13 executing program 5: futex(&(0x7f0000000140), 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x0) 16:35:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x2) 16:35:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 16:35:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000200)={@rand_addr=0x64010101, @private=0xa010101, @loopback}, 0xc) 16:35:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xa0000010}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) unshare(0x48020200) 16:35:13 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x882c2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000002) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(0xffffffffffffffff, 0x800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='$}', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYBLOB="833c678370f3c0192ac188feb41b83ac313c590a167c26366de7f6e94cb8219a7507ba522321e981b5233ef8032e49e3be17be074a55cfd8e89533042142096aa61f2bc5a8f908ac9cc3843f027c01f2334ad2e79d3f2c82c80a5bc908d669104ff40372b598db400aae9e28aad05434b34918ae7976083b1db3b6a5ed213190bdad88f424f57630900046a0c23f37a33f7399fc671d5de6029a42bdef9e111621241fda4ceb28f36de06b384da28824010b5e607a5add8d5b484985"], 0x54, 0x3) sendfile(r0, r1, 0x0, 0x100000001) creat(&(0x7f00000000c0)='./file1\x00', 0x35) 16:35:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 1914.293437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x2) 16:35:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x3}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 16:35:13 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "82363f", 0x48, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x88, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @enc_lim]}], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "001000", 0x0, 0x0, 0x0, @private0, @private2}}}}}}}, 0x0) 16:35:13 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) [ 1914.475641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1914.490735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1914.802901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1914.831311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x4}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:13 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x2d, &(0x7f0000000080)={&(0x7f00000006c0)={0x28, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0xc, 0x12, 0x0, 0x0, @u64=0x2}]}, 0x28}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xa000, 0x40) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x8, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}], [{@smackfstransmute}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfshat}, {@smackfsfloor={'smackfsfloor', 0x3d, '-@\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}]}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000140), 0x0, 0x20, &(0x7f00000001c0)={r3, r4+60000000}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r5, &(0x7f0000000280)='./file1\x00', 0x2) openat(r5, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) 16:35:13 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a02562eec73c14c84621ffc3ec6e6228b7442170767757fcadcfd759c2ec0808c479b021d4139d892029d695e0cba5337340d6b1a9c403", 0x37, 0x8000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) splice(r2, 0x0, r1, 0x0, 0xde, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @random="fe19f36edc19"}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:35:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r1 = getpgrp(0x0) pidfd_open(r1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000001c0)=0x2) 16:35:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 16:35:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x0) 16:35:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0xb65, @mcast2, 0xfffffffc}, 0x1c) r1 = creat(0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1f40c51b1b780b7b, @perf_config_ext={0x0, 0xffffffffffffffff}, 0xc000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="00000000000004002e2f6669"]) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000003c0)='-\xfcx{\xe6\xac\xc8\xdf\x8e;\xb4Wy\xbea\xac2@\xa7\\\x98\x1f\x9d\x00\x00\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x20, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1, 0x3, 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 16:35:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xa0000010}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) unshare(0x48020200) [ 1914.923784] 9pnet: Insufficient options for proto=fd 16:35:14 executing program 1: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(r0, 0xb) shmctl$IPC_RMID(r0, 0x0) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x7000) [ 1914.943837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=32 sclass=netlink_tcpdiag_socket pid=815625 comm=syz-executor.5 [ 1914.953373] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=815625 comm=syz-executor.5 16:35:14 executing program 6: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600", 0x0, 0x401}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) mq_open(0x0, 0x3, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/230, 0xe6, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r2 = syz_mount_image$nfs4(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000000680)=ANY=[@ANYBLOB]) openat(r2, &(0x7f0000000980)='./file0\x00', 0x268c40, 0x108) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x30}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 16:35:14 executing program 7: prctl$PR_SET_MM_MAP(0x2a, 0xe, 0x0, 0x0) 16:35:14 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 1915.086184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xffffff00) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x9}, 0xe) shutdown(r0, 0x1) 16:35:14 executing program 5: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 16:35:14 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x15, 0x0, &(0x7f0000000480)) [ 1920.060606] Bluetooth: hci4: command 0x0409 tx timeout [ 1922.108623] Bluetooth: hci4: command 0x041b tx timeout [ 1924.156663] Bluetooth: hci4: command 0x040f tx timeout [ 1925.520009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.522249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.526068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1925.582748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1925.585173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1925.588467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1925.752765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1925.764111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.072318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.077677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.079137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x5}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:25 executing program 6: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') pread64(r1, &(0x7f0000000080)=""/4095, 0xfff, 0x303) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r3 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x7, &(0x7f0000000040)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000010d00)="ed41000000040000ddf4655fdef4655fdef4655f000000000000040020", 0x1d, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x0, &(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES16=r2, @ANYRES64]) r4 = getpgrp(0x0) ptrace(0x10, r4) kcmp(0x0, r4, 0x1, r0, r3) fcntl$setown(0xffffffffffffffff, 0x8, r4) waitid(0x0, r4, 0x0, 0x8, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000180)={0x0, 0x0, 0x1}, 0x18) 16:35:25 executing program 0: pipe(0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 16:35:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xa0000010}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) unshare(0x48020200) 16:35:25 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:25 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a02562eec73c14c84621ffc3ec6e6228b7442170767757fcadcfd759c2ec0808c479b021d4139d892029d695e0cba5337340d6b1a9c403", 0x37, 0x8000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) splice(r2, 0x0, r1, 0x0, 0xde, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) connect$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @random="fe19f36edc19"}, 0x14) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 16:35:25 executing program 5: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) [ 1926.204837] Bluetooth: hci4: command 0x0419 tx timeout 16:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) [ 1926.329287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.378131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000010a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r6, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd7000ffdbdf252b00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x20048814}, 0x850) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) [ 1926.540895] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.6'. 16:35:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1}) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0xa0000010}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r3, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000200)={0x7, 0x21, 0x1}, 0x7) unshare(0x48020200) [ 1926.749156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 16:35:26 executing program 6: fork() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getpgid(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x89) r2 = creat(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0x0, 0x1, @thr={&(0x7f0000001780)="daae39ffe92ea11875ee2e075f76812ee9fdc7fbe7d0fa685ae6893baa80ecf70f3480b9dbdd792f2055ace8b484369bef404be62125f0e221d0c17b06e765f495952925e3281ea6812127f7d10d91c35cde54046fd33b856a5cca7e9f6c", &(0x7f0000001600)="3ec233cb535c813178e3134987c115762fcf1e5aee226430d8e1787b1c0b87c79846f2427a776a6806d5bc037a0ee18b0afd4e8ebbb3f150dd4de3029cd314a798a64057d0d0d9865f73cbdf5ef37abefbee5e354cf2e64b19f14621eefba146e194ed6c784aa0f164d5c62c8e0be46056ff87893e7a2dad67"}}, &(0x7f00000016c0)) 16:35:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x6}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) 16:35:26 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}]}, 0x1c}}, 0x0) 16:35:26 executing program 5: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 16:35:26 executing program 3: r0 = getpid() r1 = pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0xffffffc6}, 0x0) 16:35:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}}, 0x0) [ 1927.645715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000180)="ee", 0x1, 0x7ffffd}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_setup(0x2, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000240)="1b", 0x1}]) 16:35:26 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x5609, &(0x7f0000001140)) 16:35:27 executing program 0: mq_open(&(0x7f0000000140)='_\x00', 0x40, 0x0, &(0x7f0000000180)={0x1000, 0x0, 0xb6d6}) 16:35:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) 16:35:27 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) 16:35:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x5410, &(0x7f0000000000)) 16:35:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00800008"], 0x1c}}, 0x0) 16:35:27 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r0 = fork() ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x5, &(0x7f0000000300)) r1 = fork() ptrace(0x10, r1) ptrace$getsig(0x4202, r1, 0x5, &(0x7f0000000300)) ptrace$cont(0x18, r1, 0x9, 0xfffffffffffffff9) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400001, 0x8) io_uring_enter(r2, 0x6e40, 0x5902, 0x0, &(0x7f0000000000)={[0x5]}, 0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x47642000) r3 = fork() ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x5, &(0x7f0000000300)) ptrace$setopts(0x4200, r3, 0x6, 0x40) [ 1932.668646] Bluetooth: hci4: command 0x0409 tx timeout [ 1934.716587] Bluetooth: hci4: command 0x041b tx timeout [ 1936.764574] Bluetooth: hci4: command 0x040f tx timeout [ 1938.410511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1938.412348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1938.414906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1938.472510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1938.474157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1938.476797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1938.620563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1938.632195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1938.812614] Bluetooth: hci4: command 0x0419 tx timeout [ 1938.944813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@nr_blocks={'nr_blocks', 0x3d, [0x6d]}}]}) 16:35:38 executing program 5: ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) 16:35:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x7}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:38 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x40000000) 16:35:38 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x88) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 16:35:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r2 = eventfd(0x0) dup2(r2, r0) 16:35:38 executing program 0: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create(0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1939.084158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1939.164436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:38 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 16:35:38 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x40000000) 16:35:38 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000002, 0x40010, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x420042) syz_io_uring_setup(0x2a19, &(0x7f0000000080)={0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@in6={0xa, 0x0, 0x8a4, @dev}}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001380)=@IORING_OP_READV=@pass_iovec={0x1, 0xf1930b2697df3da1, 0x0, @fd_index, 0x4, &(0x7f0000001340)=[{&(0x7f0000001180)=""/82, 0x52}, {&(0x7f0000001200)=""/207, 0xcf}, {&(0x7f0000001300)=""/17, 0x11}], 0x3, 0xc, 0x1}, 0x6) [ 1939.233609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r2 = eventfd(0x0) dup2(r2, r0) 16:35:38 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x40000000) [ 1939.566505] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1939.586012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001c00)=@req={0x0, 0xf15}, 0x10) 16:35:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x9}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r2 = eventfd(0x0) dup2(r2, r0) [ 1939.822733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1939.865563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1939.928589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1940.191778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:39 executing program 3: futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000040), 0x40000000) 16:35:39 executing program 2: r0 = semget$private(0x0, 0x6, 0x0) clock_gettime(0x0, 0x0) semtimedop(r0, &(0x7f0000000100)=[{}], 0x1, 0x0) 16:35:39 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) 16:35:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) r2 = eventfd(0x0) dup2(r2, r0) 16:35:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:fonts_t:s0\x00', 0x19, 0x0) 16:35:39 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:39 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}], 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsold}]}) 16:35:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0xf}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1940.365139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1940.371344] SELinux: Context system_u:object_r:fonts_t is not valid (left unmapped). [ 1940.379466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1940.404746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:39 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x30, r0, 0x121, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 16:35:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1072e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x80, 0x0, 0x5, 0x0, 0xffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4008240b, &(0x7f0000000200)='\x00\x00\x00\x00\xe7\xad`\xdbWJ\xfe\xa6\xb2\x00\x00\x1b\x98\xaf!\x0f\xa6G-\t\x91\xd5\x12\xe3\xcc\xa2\xc7\xac\f_#0c\x00\x00\x00\x02\x99\x84\x19%\xff\xd9\x8a;\x00\x00\x00\x00') r1 = socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x8}, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001f00)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x22, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = signalfd(r2, &(0x7f0000000340)={[0x8001]}, 0x8) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000380)={0x3, 0x1}, 0x4) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r7, 0x29, 0x1c, &(0x7f0000000180)={@local, r8}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @random="c480e72d13a8"}, 0x14) fcntl$setpipe(r3, 0x407, 0x80000000) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x783080, 0x39, 0x9}, 0x18) 16:35:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000480)) 16:35:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={0x28, 0x2c, 0xc21, 0x0, 0x0, {}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4, 0xb}]}]}, 0x28}}, 0x0) 16:35:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:fonts_t:s0\x00', 0x19, 0x0) 16:35:39 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x2) [ 1940.673045] netlink: 'syz-executor.5': attribute type 11 has an invalid length. [ 1940.723387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x26, 0x0, &(0x7f0000000180)) 16:35:39 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @echo_reply}}}}}, 0x0) 16:35:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x11}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:39 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d73, 0x0, 0x2, 0xbb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) r8 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0, r6}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0xd4, "544d056968f26f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000000340)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {0x0, r13}], 0x5, "b53acec1810ff0"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000043380)={r6, r7, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000044380)={r5, r4, "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", "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"}) dup2(r0, r2) [ 1940.926251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1940.936137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1941.243519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:fonts_t:s0\x00', 0x19, 0x0) 16:35:40 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:35:40 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @echo_reply}}}}}, 0x0) 16:35:40 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x12}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) 16:35:40 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) 16:35:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @echo_reply}}}}}, 0x0) [ 1941.466152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:fonts_t:s0\x00', 0x19, 0x0) 16:35:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2287, 0x0) [ 1941.479892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:40 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:40 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:40 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 16:35:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@local]}, 0x14) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) 16:35:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @echo_reply}}}}}, 0x0) [ 1941.792262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x89) dup2(r2, r1) 16:35:41 executing program 7: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 16:35:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x14}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000001480)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) 16:35:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) 16:35:41 executing program 6: r0 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @dev}}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xd6) 16:35:41 executing program 0: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:35:41 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f80200003700008c3508da3e6e012cbd7000ffdbdf2519ec000008002100963859f5edc264006475356ac3658a0ab56a5c53ad054f9c0a6b498f58514ff3ab20a2817cfd2a9d9dd04a2377d7a34a1b00a68366711f000f56cae6d990f9e096f1fdb7795063204c276112410cdf49f5fea1e5e311ffc428ee26e4e5eefcc16699a61bcc3d200000000800000032c1f9582b2ba38f91fe5481ab8e7d9172910fc7f7aa862c47a62bf63c27253501f5be986bc9cb296008153d72292a4d970c4fbfe73ddca3510b466b41ee8c34fd0e7c467c00000000000000000000b5a84d9e000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x2f8}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e21, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1942.219898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1942.275711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:41 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x58a7, 0x0, 0x0, 0x0, 0x0) 16:35:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 16:35:41 executing program 3: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x200000, 0x0, 0x0) 16:35:41 executing program 7: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 16:35:41 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x15, 0xe21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 1942.617436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x89) dup2(r2, r1) 16:35:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x15}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) [ 1942.849454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000180)=0x3, 0x9, 0x0) r4 = gettid() syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ptrace$peek(0x1, r4, &(0x7f0000000280)) getpriority(0x2, r4) getuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0)=0x20, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') 16:35:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x58a7, 0x0, 0x0, 0x0, 0x0) [ 1942.916671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 16:35:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x89) dup2(r2, r1) 16:35:42 executing program 7: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 1942.998454] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. 16:35:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x58a7, 0x0, 0x0, 0x0, 0x0) 16:35:42 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=""/13, 0xd) 16:35:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 16:35:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="a3", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0x89) dup2(r2, r1) 16:35:42 executing program 7: r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) [ 1943.266300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:42 executing program 3: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x200000, 0x0, 0x0) 16:35:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000180)=0x3, 0x9, 0x0) r4 = gettid() syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ptrace$peek(0x1, r4, &(0x7f0000000280)) getpriority(0x2, r4) getuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0)=0x20, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') 16:35:42 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x58a7, 0x0, 0x0, 0x0, 0x0) 16:35:42 executing program 0: syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty}, {0x0, 0x0, 0x8, 0x0, @wg=@response={0x2, 0x0, 0x0, "60e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdc", "ef341e008fa00504f312e7b8462700f3", {"36cd250a0cb728d6eec84085575dab02", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) 16:35:42 executing program 7: getresuid(0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001480)=@acquire={0x128, 0x17, 0x508, 0x70bd2d, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x4d6, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {@in=@local, @in6=@private2, 0x4e22, 0x2, 0x4e24, 0x0, 0x2, 0x20, 0x0, 0x3c, 0x0, r0}, {{@in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e20, 0x0, 0x4e24, 0x7ff, 0xa, 0xc0, 0xa0, 0x33}, {0x4, 0x8, 0x8000, 0xe, 0x1, 0x5, 0x4, 0x5}, {0x2, 0x8001, 0x5}, 0x3, 0x0, 0x2, 0x1, 0x0, 0x2}, 0x1, 0x82, 0x6, 0x70bd28}}, 0x128}, 0x1, 0x0, 0x0, 0x20048851}, 0x491) dup2(r1, r2) 16:35:42 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) 16:35:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 16:35:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x16}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1943.648802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1943.661417] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1943.686330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:42 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) 16:35:42 executing program 0: pipe2$9p(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 16:35:42 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) 16:35:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) 16:35:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000180)=0x3, 0x9, 0x0) r4 = gettid() syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ptrace$peek(0x1, r4, &(0x7f0000000280)) getpriority(0x2, r4) getuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0)=0x20, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') 16:35:42 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x403) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000240)="9469578b57fc8cef9b2f42e2f616db401c6fb86b1b0e0f837820473d07cc3f64af8963e615b33c6004bc84cef10f8c66a423e0b8324c54f84dfc4b2dbadbaeec758c2e9890d059db6ff016dbad65998a07cb965fcd9c4fcb", 0x58}, {&(0x7f0000000700)="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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) 16:35:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)) fspick(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, r1) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000001000000230000000000000050ba2738a1a56d0ee56086ea87835862660cc7c3adc370eab3250b40c3a2a7cde4483db3e232ab4a45f152b78962fa32fb8335c07b507cae9af115b2e9727d28a40848afd0d311ef03cb8aa511e88cf17495"], 0x2c2c80) 16:35:42 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xff}) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000180)) [ 1943.907951] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1944.014107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:43 executing program 3: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x200000, 0x0, 0x0) 16:35:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)) fspick(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, r1) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000001000000230000000000000050ba2738a1a56d0ee56086ea87835862660cc7c3adc370eab3250b40c3a2a7cde4483db3e232ab4a45f152b78962fa32fb8335c07b507cae9af115b2e9727d28a40848afd0d311ef03cb8aa511e88cf17495"], 0x2c2c80) 16:35:43 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x90, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d17065093"}]}, 0xa4}, 0x1, 0x0, 0x0, 0xb0}, 0x8044) syz_io_uring_setup(0x22, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000002a40)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x802073, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) copy_file_range(0xffffffffffffffff, 0x0, r3, &(0x7f0000000180)=0x3, 0x9, 0x0) r4 = gettid() syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r1, &(0x7f0000000200), 0x0, 0x0, 0x1000}, 0x9) ptrace$peek(0x1, r4, &(0x7f0000000280)) getpriority(0x2, r4) getuid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0)=0x20, 0x4) syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_tables_targets\x00') 16:35:43 executing program 2: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 16:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x17}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:43 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x403) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000240)="9469578b57fc8cef9b2f42e2f616db401c6fb86b1b0e0f837820473d07cc3f64af8963e615b33c6004bc84cef10f8c66a423e0b8324c54f84dfc4b2dbadbaeec758c2e9890d059db6ff016dbad65998a07cb965fcd9c4fcb", 0x58}, {&(0x7f0000000700)="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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) 16:35:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local={0x11}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1c, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @remote}}}}}}, 0x0) 16:35:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000000)="8c6ef3f30ecae39ccecd46a8dd0038c42001413e9b4a", 0x16) [ 1944.641832] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1944.660631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1944.696046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1945.026354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1945.035975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:44 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) socket$netlink(0x10, 0x3, 0x0) 16:35:44 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x20, 0x4, "99fa0d22"}}) 16:35:44 executing program 2: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0xbaf, 0x7, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') fcntl$setown(r0, 0x8, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 16:35:44 executing program 3: r0 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x200000, 0x0, 0x0) 16:35:44 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x403) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000240)="9469578b57fc8cef9b2f42e2f616db401c6fb86b1b0e0f837820473d07cc3f64af8963e615b33c6004bc84cef10f8c66a423e0b8324c54f84dfc4b2dbadbaeec758c2e9890d059db6ff016dbad65998a07cb965fcd9c4fcb", 0x58}, {&(0x7f0000000700)="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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) 16:35:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x18}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)) fspick(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, r1) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000001000000230000000000000050ba2738a1a56d0ee56086ea87835862660cc7c3adc370eab3250b40c3a2a7cde4483db3e232ab4a45f152b78962fa32fb8335c07b507cae9af115b2e9727d28a40848afd0d311ef03cb8aa511e88cf17495"], 0x2c2c80) 16:35:44 executing program 6: semctl$GETNCNT(0xffffffffffffffff, 0x0, 0xe, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000120c0)={&(0x7f0000002000), 0xc, &(0x7f0000012080)={&(0x7f0000011ec0)={0x30, 0x0, 0x0, 0x70bd28, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}}, 0x0) socket(0x1d, 0x5, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000012680)={0x0, 0x0, &(0x7f0000012640)={&(0x7f0000012300)={0x64, r1, 0x800, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8851}, 0x4) syz_mount_image$vfat(&(0x7f00000126c0), &(0x7f0000012700)='./file0\x00', 0xfffffffffffffffb, 0x4, &(0x7f0000014980)=[{&(0x7f0000012740)="dc", 0x1}, {0x0, 0x0, 0x6e}, {0x0}, {&(0x7f0000013940)}], 0x100c490, &(0x7f0000014a40)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000014b40), 0x0) [ 1945.651798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) [ 1945.686088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, &(0x7f00000006c0)) fspick(0xffffffffffffffff, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x12, 0x0, r1) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0800000001000000230000000000000050ba2738a1a56d0ee56086ea87835862660cc7c3adc370eab3250b40c3a2a7cde4483db3e232ab4a45f152b78962fa32fb8335c07b507cae9af115b2e9727d28a40848afd0d311ef03cb8aa511e88cf17495"], 0x2c2c80) 16:35:45 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) socket$netlink(0x10, 0x3, 0x0) 16:35:45 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x430a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYRESDEC], 0x403) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, r5, 0x1, 0x8, 0x6, @random="1900de9961ac"}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000240)="9469578b57fc8cef9b2f42e2f616db401c6fb86b1b0e0f837820473d07cc3f64af8963e615b33c6004bc84cef10f8c66a423e0b8324c54f84dfc4b2dbadbaeec758c2e9890d059db6ff016dbad65998a07cb965fcd9c4fcb", 0x58}, {&(0x7f0000000700)="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", 0x1000}], 0x3}, 0x3000c080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @random="b1f4a6611bde"}, 0x14) 16:35:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1946.014146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:45 executing program 2: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0xbaf, 0x7, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') fcntl$setown(r0, 0x8, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 16:35:45 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) socket$netlink(0x10, 0x3, 0x0) 16:35:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x19}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:45 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="74029ce7", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) [ 1946.246466] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 16:35:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}) [ 1946.332359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1946.474217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:45 executing program 6: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socketpair(0x25, 0x0, 0x0, &(0x7f0000000340)) 16:35:45 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) socket$netlink(0x10, 0x3, 0x0) 16:35:45 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') pread64(r0, 0x0, 0x0, 0x0) 16:35:45 executing program 2: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0xbaf, 0x7, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') fcntl$setown(r0, 0x8, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 16:35:45 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="74029ce7", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:35:45 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) [ 1946.840106] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1951.293642] Bluetooth: hci4: command 0x0409 tx timeout [ 1953.340572] Bluetooth: hci4: command 0x041b tx timeout [ 1955.388564] Bluetooth: hci4: command 0x040f tx timeout [ 1956.405497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.407795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.443754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1956.464436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.466249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.470114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1956.648304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1956.661961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1956.972821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x24, &(0x7f0000000000), 0x8) 16:35:56 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfffffdbb) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000480)) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 16:35:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@audit}]}}) 16:35:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}]}]}, 0x28}}, 0x0) 16:35:56 executing program 2: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0xbaf, 0x7, 0x5) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') fcntl$setown(r0, 0x8, 0x0) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) mbind(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, &(0x7f0000000040)=0x5, 0x8, 0x2) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) 16:35:56 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="74029ce7", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x1a}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) [ 1957.081173] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 1957.227344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.265640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.436719] Bluetooth: hci4: command 0x0419 tx timeout [ 1957.619407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.630917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x40}}, 0x0) getpgrp(0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 16:35:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) 16:35:56 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:35:56 executing program 1: sysfs$2(0x2, 0xde4, &(0x7f0000000180)=""/156) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="74029ce7", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250b0000000c00018008000800030000002800028005000d000100000014000100fc02000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x40040d0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r0}, 0xfffffffffffffec8) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'sit0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c3ee2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}]}, 0x28}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 16:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x1b}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:35:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x1) 16:35:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 16:35:56 executing program 7: mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xc024, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) [ 1957.882851] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 16:35:57 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) [ 1957.907544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1957.936058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x28, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xe14, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0xf, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 16:35:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, 0x5e, 0xc21, 0x0, 0x0, {}, [@typed={0x2}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 16:35:57 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:35:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents(r0, &(0x7f0000000400)=""/76, 0x18) getdents(r0, &(0x7f0000000180)=""/137, 0x89) [ 1958.147489] netlink: 'syz-executor.7': attribute type 15 has an invalid length. [ 1958.149742] netlink: 'syz-executor.7': attribute type 15 has an invalid length. [ 1958.151898] netlink: 'syz-executor.7': attribute type 15 has an invalid length. 16:35:57 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYBLOB="e1e3bfc5379cfae1f098349d16455c9049fb6dc91e1d0aca18251a78e6", @ANYRES32=r4, @ANYBLOB="01000000000000002e2f66696c65312f66696c653000"]) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed", 0x81, 0xb800}], 0x0, &(0x7f0000000180)) r5 = getpgrp(0x0) pidfd_open(r5, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa4000, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xf39, 0x4, @perf_bp={&(0x7f00000000c0), 0x1}, 0x6800, 0x3, 0x2, 0x5, 0x80000000, 0x200, 0x84b9, 0x0, 0xff, 0x0, 0x8}, r2, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0xcf, 0xd8, 0x63, 0x0, 0x16e3a261, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x80000000}, 0x1000, 0x1f, 0xffff, 0x6, 0x3, 0x1000, 0x400, 0x0, 0x0, 0x0, 0x7}, r5, 0x8, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x1) 16:35:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf7e49a1d95947318303ae70299e26a0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000011600)="ed41000000080000e0f4655fe0f4655fe0f4655f000000000000040040", 0x1d, 0x2100}, {&(0x7f0000011800)="8081000000180000e0f4655fe0f4655fe0f4655f000000e5110683b4e2de0c0010400800000000000af3010004", 0x2d, 0x2200}], 0x0, &(0x7f0000014100)) [ 1958.271363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:35:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x1c}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1958.609970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1963.196549] Bluetooth: hci4: command 0x0409 tx timeout [ 1965.244666] Bluetooth: hci4: command 0x041b tx timeout [ 1967.292591] Bluetooth: hci4: command 0x040f tx timeout [ 1968.355367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1968.357273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1968.360708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1968.411764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1968.413694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1968.417367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1968.585635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1968.596099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1968.904448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:08 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=[{0x408, 0x1, 0x1, "1a718b798d39d615781001ecde0f79331debcf6092f6ccf9a0327a6a9bee76e5dfee0543651c8c92aa5d85e031c0a9676ffebf2a6893addb717df0f9eeb0f47e1931fb47d1a1ec9531d647776b933502a03fe1d992c4a4e7cf8637bc3f42ffcad2c5c65f95bc11f4c549c10b6aa78b0050724fb6638425c3ab2fa5f59f30b4ae574318e2ee8466c4b04729566c4801fce7d4c2bebe24e1b1e4c0497603baef935a14432d32071d131b7e26ba72218eaf27618241938282473aff026c2597644f6989134b14e4b9a0669f8de3df4e5301a3a1e4b72c290209944b2ec99427ddb3eaa12f8e1e5f310d46e8188022ef27f874b8ca17d01ebfedc2f8e0463f57ab1184a799c656b73bc10b31222ccdf587ac699cedf74e70a85ddfd62d6ab14e92525e4984430245b7b5266b16159d26e113ec763e35dd943f1bbb248b1823d3eaf7e3f2f725d57cb747302a818bc2efc10aee2b1d30f7a6383f58b12233f23277082a12f8b4b9815442b4fb867d24c81725a4e0fa0d1c40c9cb4903bd9dc31842ac9ad5ef1c94c041ffa704b8ec23f767c591334bb23fc362a881f34a95d96ca255646d1352adca4d51a508c5d8c42fa7e970b92da24a635ee74d9d34bc1896e9169b16d8d2228381147a06234e41b3d78fbc955663dfa2e20fcb830a5e0e834c6689684578b361b8a50702db650ecef8068e8cdc0fc9454c2ebd19034bbe6b9e4afed46da0b83e1c7e316d509c3ac42c6fa5c71ec34e0629394ce54e9121931d25de5c4131c79d8cb1c181b8e7758fa33e383b1c9edf8808a502f62728a0a94787d59eaacd251220947155006798b809301920f49ffd76c4cb86977555620dcfdb7b79a5aa6acebbb04f599e00426c6695f3fa738aab867af4742f66226c9aadf613aa236029a8d27328cee4ef5e6d80b1aa5aff58b0419bb27c98fea79d187680f68d7b1c542c59937ec96bb5280e6e43944647a51752b11dd8ddc4051bc4f979af3719c25e5c5824300ea89e63a4963a88eacd3b5648472c4420fcc27ff6612fd2d47744e746669356f5da76a60f80343a4b27039c94139c655179df1ffe61531ad2ba0e17e75967ade3d3756d4d1ac5ab801501233b85577e34d975339f1495f9b91232a707a790d8d9c82edf7594c1c7c3146e5acaa620fcf04b4d0e52438edf68ca3afe10964f8d1b774917c8a1bb3f9fb57aece4ffe38c529b40be43c98ed7b3e74b573837cffca8c4434ae9ba39776971f41b122b9b867cc44f4fd5bec4de773d75cf623ba05f8b4403484dae9a6c52df01f569c38e97b4e607c2486463a4a17fd5d56788ccddfe23c0975e2265ac14bd73c38c6bb145a1fc5de8a01699558cfb01276b9566185f5be9cd32e99e5aaa4435022727a127eeac6cb7a550310f780761fc9748ef31fd0c1fbae7bbf363"}], 0x408}}], 0x1, 0x0) 16:36:08 executing program 1: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, 0x0) 16:36:08 executing program 2: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r1, 0x200000) dup2(r1, r0) ftruncate(r0, 0x0) 16:36:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x1d}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:08 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x48, 0x0, 0x0, 0x0) 16:36:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:08 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) [ 1969.136379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1969.171283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:08 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:08 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:08 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) [ 1969.340734] Bluetooth: hci4: command 0x0419 tx timeout [ 1969.488043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:09 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:09 executing program 3: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:09 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x60}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, 0x0, 0x0) [ 1970.004372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.046880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:09 executing program 2: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140), &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:09 executing program 0: creat(0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000002004e1ce0000001"], 0x410) 16:36:09 executing program 7: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x69) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(0x0, 0x0) inotify_add_watch(r2, 0x0, 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x20, 0x0, 0x61}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x3) 16:36:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x1000000) getdents64(r0, 0x0, 0x0) [ 1970.389464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:09 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/101, 0x65}], 0x1, 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000040)={0x0, 0x0}) 16:36:09 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8003, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0xff}], "", ['\x00']}, 0x1b0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 16:36:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:09 executing program 0: creat(0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000002004e1ce0000001"], 0x410) 16:36:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:09 executing program 7: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 16:36:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x40, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./file1\x00') renameat2(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000040)='./file0\x00', 0x4) [ 1970.696294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.711243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.044621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.051381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.052226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8003, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0xff}], "", ['\x00']}, 0x1b0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 16:36:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="210300000000000000001cdb000004000180"], 0x18}}, 0x0) 16:36:10 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) tee(0xffffffffffffffff, r0, 0x1, 0x6) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f00006f5000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xa205e000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x541b, 0x0) close_range(r3, 0xffffffffffffffff, 0x2) fallocate(r2, 0x0, 0x0, 0x1000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 16:36:10 executing program 5: pselect6(0x40, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x0, 0x0) 16:36:10 executing program 0: creat(0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000002004e1ce0000001"], 0x410) 16:36:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35313233303831343700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000b00cb2cc029f49d8b90449a7ecd54d49010000000c00000000000000dff4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dff4655fdff4655fdff4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000b45b976cb45b976c00000000dff4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000dff4655fdff4655fdff4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000dff4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000e0f4655fe0f4655fe0f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000024a8270e00000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000e0f4655fe0f4655fe0f4655f000000000000010004000000000000000100000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038ac705900000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000e0f4655fe0f4655fe0f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3531323330383134372f66696c65302f66696c653000000000000000000000000000000000000000000000ae39138600000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000e0f4655fe0f4655fe0f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c412e2ee000000000000000000000000000000000000000000000000020000000b45b976cb45b976cb45b976ce0f4655fb45b976c0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) 16:36:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00') write$tcp_mem(r0, &(0x7f0000000100), 0x48) [ 1971.216590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.227153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.533102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[]) 16:36:10 executing program 0: creat(0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000140), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast1, @local, @dev}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030000000000000002004e1ce0000001"], 0x410) 16:36:10 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0xffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 16:36:10 executing program 7: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x181000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xa000, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) 16:36:10 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r0, 0x0) 16:36:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8003, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0xff}], "", ['\x00']}, 0x1b0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 16:36:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:10 executing program 2: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/78, 0x4e) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/49, 0x31) [ 1971.683142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) fallocate(r2, 0x0, 0x0, 0x8000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000000c0)=ANY=[@ANYBLOB="01c90000000100000018000000", @ANYRES32=r3, @ANYBLOB="05000000010000002e2f66696c653100"]) creat(&(0x7f0000000080)='./file1\x00', 0x23) [ 1971.708651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:10 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000002440), 0x0, 0x0) r1 = io_uring_setup(0x1f00, &(0x7f0000000080)) dup2(r0, r1) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/94, 0x5e}], 0x1) 16:36:10 executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x541b, 0x0) 16:36:10 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 16:36:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x46, 0x0, &(0x7f0000000040)) 16:36:10 executing program 7: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x181000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xa000, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) 16:36:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8003, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0xff}], "", ['\x00']}, 0x1b0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = dup2(r4, r4) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 16:36:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x13, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) 16:36:11 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 16:36:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x3e, 0x0, &(0x7f0000000100)) [ 1971.998964] netlink: 'syz-executor.0': attribute type 19 has an invalid length. [ 1972.027104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:11 executing program 7: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x181000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xa000, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) 16:36:11 executing program 2: ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000080)) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000100", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000002000210c00093d59d2dd7bdedb423a35bd3d000000000000"], 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000380), 0x10) 16:36:11 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f00000000c0)=""/191, 0xbf) signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x1000) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x401}]}, 0x10) 16:36:11 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x6, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x1d4, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97", @nested={0xed, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r5}, @generic="b53c248718be40aefb6777b42655337de0da5bdea1958edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb46da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38992716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1d4}}, 0x0) 16:36:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 16:36:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x4}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:11 executing program 5: ioperm(0x10001, 0x0, 0x100) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8091}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x1f, 0x1f, 0x0, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x2b}, 0x80, 0x20, 0x10001}}) ioperm(0x0, 0x0, 0xd7f3) syz_genetlink_get_family_id$ethtool(&(0x7f0000001380), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) 16:36:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) read(r0, &(0x7f0000005900)=""/136, 0xffffffffffffffa9) [ 1972.205839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.208349] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1972.216335] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1972.217675] CPU: 0 PID: 826536 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1972.218542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.219570] Call Trace: [ 1972.219896] dump_stack+0x107/0x167 [ 1972.220387] sysfs_warn_dup.cold+0x1c/0x29 [ 1972.220921] sysfs_do_create_link_sd+0x122/0x140 [ 1972.221525] sysfs_create_link+0x5f/0xc0 [ 1972.222039] device_add+0x703/0x1c50 [ 1972.222505] ? devlink_add_symlinks+0x970/0x970 [ 1972.223143] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1972.223814] wiphy_register+0x1da6/0x2850 [ 1972.224346] ? wiphy_unregister+0xb90/0xb90 [ 1972.224899] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1972.225593] ieee80211_register_hw+0x23c5/0x38b0 [ 1972.226206] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1972.226843] ? net_generic+0xdb/0x2b0 [ 1972.227411] ? lockdep_init_map_type+0x2c7/0x780 [ 1972.228011] ? memset+0x20/0x50 [ 1972.228436] ? __hrtimer_init+0x12c/0x270 [ 1972.228965] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1972.229600] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1972.230164] ? hwsim_new_radio_nl+0x967/0x1080 [ 1972.230719] ? memcpy+0x39/0x60 [ 1972.231128] hwsim_new_radio_nl+0x991/0x1080 [ 1972.231683] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1972.232320] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1972.233116] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1972.233943] genl_family_rcv_msg_doit+0x22d/0x330 [ 1972.234527] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1972.235330] ? cap_capable+0x1cd/0x230 [ 1972.235816] ? ns_capable+0xe2/0x110 [ 1972.236272] genl_rcv_msg+0x36a/0x5a0 [ 1972.236735] ? genl_get_cmd+0x480/0x480 [ 1972.237222] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1972.237851] ? lock_release+0x680/0x680 [ 1972.238332] ? __lockdep_reset_lock+0x180/0x180 [ 1972.238896] netlink_rcv_skb+0x14b/0x430 [ 1972.239392] ? genl_get_cmd+0x480/0x480 [ 1972.239873] ? netlink_ack+0xab0/0xab0 [ 1972.240351] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1972.240908] ? is_vmalloc_addr+0x7b/0xb0 [ 1972.241404] genl_rcv+0x24/0x40 [ 1972.241805] netlink_unicast+0x6ce/0xa00 [ 1972.242300] ? netlink_attachskb+0xab0/0xab0 [ 1972.242841] netlink_sendmsg+0x90f/0xe00 [ 1972.243339] ? netlink_unicast+0xa00/0xa00 [ 1972.243862] ? netlink_unicast+0xa00/0xa00 [ 1972.244381] __sock_sendmsg+0x154/0x190 [ 1972.244866] ____sys_sendmsg+0x70d/0x870 [ 1972.245358] ? sock_write_iter+0x3d0/0x3d0 [ 1972.245868] ? do_recvmmsg+0x6d0/0x6d0 [ 1972.246341] ? SOFTIRQ_verbose+0x10/0x10 [ 1972.246836] ? __lockdep_reset_lock+0x180/0x180 [ 1972.247410] ___sys_sendmsg+0xf3/0x170 [ 1972.247888] ? sendmsg_copy_msghdr+0x160/0x160 [ 1972.248444] ? __fget_files+0x2cf/0x520 [ 1972.248928] ? lock_downgrade+0x6d0/0x6d0 [ 1972.249436] ? __fget_files+0x3ad/0x520 [ 1972.249920] ? __fget_files+0x2f8/0x520 [ 1972.250413] ? __fget_light+0xea/0x290 [ 1972.250889] __sys_sendmsg+0xe5/0x1b0 [ 1972.251355] ? __sys_sendmsg_sock+0x40/0x40 [ 1972.251876] ? __do_sys_futex+0x2bb/0x480 [ 1972.252394] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.253028] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1972.253642] ? trace_hardirqs_on+0x5b/0x180 [ 1972.254165] do_syscall_64+0x33/0x40 [ 1972.254611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1972.255227] RIP: 0033:0x7f6c437f9b19 [ 1972.255689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.257915] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.258843] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 1972.259714] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 1972.260579] RBP: 00007f6c43853f6d R08: 0000000000000000 R09: 0000000000000000 [ 1972.261442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1972.262315] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 [ 1972.275082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:11 executing program 7: chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x181000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xa000, 0x40) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) 16:36:11 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001880), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00'}) 16:36:11 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x6, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x1d4, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97", @nested={0xed, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r5}, @generic="b53c248718be40aefb6777b42655337de0da5bdea1958edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb46da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38992716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1d4}}, 0x0) 16:36:11 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x0) 16:36:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 16:36:11 executing program 3: syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{'noac,'}]}) 16:36:11 executing program 1: r0 = syz_mount_image$tmpfs(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_inodes=1']) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') 16:36:11 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)=@phonet={0x23, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000300)="050300000013890000004c435ce0f87181858ced753d49d8ecb2a18956fd475167c74940c9f170abcef15a2646cc6bc18bc7ea42b0a819b9aa6d6e0a40de161036b064c609c453dcc0193484715e01a3cf7350060000007a6365dbffdfe98717e7ebe77c36cec6bce2ec8f103a63900770d3e65bceb99a05540bc374fa63951f3f5e61d7b8f42a0c424f365c06a2c48ceeb861cac6", 0x20000395}, {&(0x7f0000002500)="ac62de50be9150cecb9519feef8aaefe2e318345b124699ae9b420222c5d8b3a256f911da3e62781ddc19355864186fdca40a01c749a2e21023119a234c0870ecbebc3d845ae8d1413e9569178836a211be2064c1058da5bfe94b2eb55dc5e7c04b6d551a2b8a66b616a1f560a814f1104507dc4aaeec0664ac5033f1f6f93878f5ac86eaee7c577754b20bc67739e8ba0c36c71cf67d48fc48d634216bd157bbe1b8538be4354afdc9de93d7b50411766e773b656ec9e9fa28d0bfa23ad3848946811c51e47d83849586641a1ffcd53ea8ecbc0127f3a0358867b3f5596486f17bbc224c0c2d3026f55788b76bb00afb1aa130af0e592f309cbe4be262dd282614e2cf1feb35ec5b620910aa89d5046dce6c4bdc56e736e6e57f2ff1d5dcc08ac0dd637a2320c32859ff091ba48f1a7b86a9920cc976933f636d898392ffd2fd412b31ebff14fda3ef1cec5dfb280b5f2b0618fb8403c5f45fbbbd996963066290fd546db1e785b1b86d0b7e726ef4dca1b4fe43b8cd7eb5fe1e46b4ee4a930d0fc27c99dd3de35699fbdc46fc8ef26e5ca0e48b3552e3cd03dffcdde3937fa5708e189b268f4fd87ee7fb58a5050bb1adb8ca7639c047059dfbddfc1de09ba07f1c8b59b71c9f9b906bd22e7eb1584debc753740d08afd8ad9dfae5d229e26beca1fa2f5023dcc846ddcc99460b8e798c51e9ac9ce21e53156dd09ef8e74fa17861580d64b46d79c985dfc3b0c7dd7938f891458f11b7d407c3ced632e7f4723eda9ee1ad17fcb917824181c9cd727b90b6c60145ff9bbb7ae96168ac5ae059bd3458d29c7a8ad489dd24f4478e6a5fee88acca552fce511a5b3c1610bf82d18d1011f21080e08f45ffaaa6345955f98ad55876a44b8620f3ba8fd14726114bc5c38f2ca630db5acf3366aacd5e2737071189c63ccf5e1678241f185f7d7ba11a9a353f6406a412626cf7750485b52dd5d55f2e18cc4f29239d9d492e9cd5472ef2c2f5f090766da7836c86010ef0e0b85b573a35bd713bebd46dd917b72a4dea62a241e0647ff49aa954622fcae3fe92b3bef09ca920259e7aff386aadc77031efddcde1d7efe831a94595a30a5dae28b3c6b6d74ebe964a79280a973541140a454a75c302a65d6a7bedeec31816ad6efaebb6d55d4d7520db879af640ceee27b302d23e76168102f390cd28b7460afaedd3572bbbab1792c5bf87c17fa47f42ad9897f0318b206a2b05c5fb252d514dd8ec68e94777d5fe75e1808304e416c6fe4f8b977773e0100cc6345051a1a7f567c058a349604ec858b709aaa04b686238fd88db3a734d2364821a305acca6b73385b9332a0af3de1ff650d81af8462b3a3301059e8df7962f0c1fb8136986fc2d468bb37f46747bfe385ac0a40c00a324e5347819141b37b81b5a680a1586feceede794d43183d4878738059f70547cab4ed57fdc719f0d99d3a43d766f75290c56078e28ed7dd40fa563763ebadccab40d8dd366ea4f022c97a6cbff833ceb5db9577e62eb43eb5551b018b574034f691a4beab2159442fd64cda674ca4b40115f9fc45cd92beee39299a46858ce7c52eb480b9935649d6289704faee8ed77d3f317a9b81582f4390148bdef975c2bdcca9980d6008f583ff7bb4df58074dd9cff957b2332fec97175728f40ab5edc5e3a6cd32e2dea2bed4d0e8804f039e11f0342b8999b8da86f7a92d9b33c59b6c925964a23a950e388c63aaa2e14731b73a0e75c9bbf81a216005335d96f3f4a8b59fccc8eda15a7e2a905a8f7db13223cfb2203c63f9c4f46d06ac7d3bb3011340e41ee38f693f0cc0c9bcdcabd4629dbc967a1bf05953caad2f23112bd8e77fbf256a8049695014085b662771f632821fe333b44a2c6136ff5af5df64d6d9f9d9fa9bbfe6775fd4fb7717b0ca416c6fe59b6e51ad7b40f4225df6b7df4fc3b2ddf3177a4350ad5347935a4020681724309c296ba2f7fedc57d20b590c2e322b259b62a4005700ed227c460c49d06571783afe6ce5b316aefdafdfc0ce3b827d06f3e0b91b445f26a4e9e29d54ba63cbfa566287e45b0bfdb751e7e3c8442d789a6f38443ca05b8ae3565c7f7147a32a3320eedc1f9a7c6d519494f8e44db616aff485ec07bdf8e784a50b4d77164971ae3fd362cdd926e5eec43a5f4604d5c2fc5c66c771352f0c16110c5947a7263a6ed417be93cd4b3f71cd4b6c600e8706cdcdf062fb69bc448ba9b15aa99b9abbe87a5c5fe791283399b565a7e77c2981d56665c5f6fda8e3eca6db9737d3c3c8d75347dfd823bfd7487cd10eb5120c205c3d98366a9e54de2e65345cae32e0881356d6a6522190a8a97ff745edec1357fc0dd2970f9219c856c391038cdbe40ec19d8290583f0c550823089d4d7dc6f61637e520c52ae2ecfad8172c65823c98770238ae4cd932994f3f3068293c7f927f7a0ff5de2e323395bc4cd6719fc26caa140ab99d6be4eb9e6e3556f533046fd3cb2e4fe4151d7ce90574ecff3127860f07a7b81cf455103fad99160364db2d187b71b6416f98fbb5d6448a62e415c5f728e6ff7f4bbb27b643ad401fe313b994d3765254a205d8a21c702cb392c5c2144297ac5a168b1c49bf06474d9e444f5bb4434a00410f52c3f445e3591aa0f833f5a2c8bebaf216ea9923164b39e604acf636d649172f7fa104587de218afc9b7d759898fbe68020d52775f3595b19fae7dd71f0fa235990310a6693c206f323b30c21dc371c919234ba2f5da66d4be085d5d6807b71308cd20d3d2dfbaedac918588939b061f044af18ff67c28351a8c8e7c7bfefa2d7a2da97f50d04160b02ea8e6b2ecdd0a8a06a0165804a3cbe7080cb90b109d580668e47b7f265aa57daad2381402fbc31b2bc9c5432882ae2d79f0c0c2fc7b1af9f9214aeed0662fd5837a0356114c6d4f4d9db90cce905daf342f6c23a0dad59e7d12c31e88c20d47d983af96ecd00f566d3715557a6aa975b6992f9e6953fd10c2540d7d5d9710f28f2e1611232727fe16fe548be72edc9d559abd14fdedc60928f6f36bbd727455d8c4b5c9a39556a14ded70b98b6a1f7c96a73954f34c02f4acbeac20fbd0519a1a0adcbeb037d5ce4e69b78ee566a14499a0f6b91b6c54b5bffee3dac99d2eac11503c358cc78f5b849e2e89e5ebdb4ae92abbf332f0e44d6a7e4e3e295cb048706334cf9c8ea2d6f924ef6d3de4995cbe013ff64505a5604d98a3a233e9b28c858a9c124a1cf261297082c8fded50bcb58ff2fe3ee5e8bef343f52bc6641b252fb29e0d9c2f156a392989742a50f9af50936fe1844480020c99732aab91fc07c43fe8098e84c5740cb368b8528d32e11208d294ab0a4df85ce2241486a1f0b87d5d524b93bf633cbd5b6a10e238c4286d00e45780bb22ddd45b88b670fcf3d3c53c993c5fb9147c4dd637124fd12b09294f16096ba96df9bebe19244c512c33bf2d53946a7f694bb3b206fabf3f20ac4e5d54dc00c08a99c3934c10a8865ed53a3b68b4730d833e4fe3142f13b0a2dba24826854dbb473160dd1b11a294b4922142b44bb19af3f2a0e1de84d3dbfb5ec547834471d127a6e6a08d2c8dac17d48d811f03670f1ec8acf08d7e0808a7bae9e2f3a4ca5d24c081fd426282ea99e2413e238e045ee932b083397153fb7ea8b4ac2d9c07c9aa4214b87a5ab68a01275736465cbe8ece86a322f278ce777905137e4af8a6e78a2d5987338f13f80bdcb34a1cd58f6f2579c222254c9735ce6aa93e1f4fc7aeb95d5e084a3b76120e48a27157f6a3ee0b707a8e685746cdac2802315f39173558928f10f4bfd55c18058cd8e502da7b00da31d313948ff5c6e3cdeeccbde7688f2ba0c0306391cf32afdb656e780428bea198171e333f8423b46ff85066a23a16ab35424fd2a187067a9f5712ca1aa35d941ed096a67cc1114b395b97a797b48f9fb14c02d95424751569a206347b47a0760f9e2f73922ff1b075833a3a70bbc4dec68fca571b37b4b80b26177f6c5ab8a95eaf87284d5d35830dfd32557fe9ac54b0ffc163cd0443ef0be97bca2baa9fa3670425b83e4fe7c029962d8b6264ee1c1e46c526618103fe90b09095149948b49edc50307c63b5c06ca6485bba772d19bcb74debb1b35bfe1c474bbc7fdc19f287e87c748c70c15edb1253db3b24f01809edb914e943d47067ea3bedbddcaa6546f7c9474d083d2b0e5f6d900d27745cbc55e899367fae44411f3a607c4ba54d860bd0129c56f7a0b0bfbdef34260593fc21cd8e303258e8f00934af20b7b663816c549ea3cd902fc9b6617d74889d1b5338f5e2f7a8f5d1798def012700004351b747c11975d1c473be7e07f405e0630a5bafd7f9f1042cecde38ad47f3fa13c1dbbedd08be12570032ac643bb38b18867ac12abc02f056c5c148e4f073dc4c358e83943ec96309378f2dec9c53508644f430b365562475414899949b812c9b0cacc5ce2e083bede083555af23959c9b1e13ed31b1646f6ff90354db9a4aadd9cf528a0e7305b10ab4ae45285291e2dab024233ff8d971895216e116a0aaa933afb65888b6248e7eeb2e2e1d4480a03ed7986dc4058e4f1752a34fd0032a0367ee2a27fcf05ea5782616f010e36a90455d1464724ab9e9a1107b661dd40967f226478145cdc5b5a1a4f434be4794a4674762c2afbbcd31d08afb93bf97563ceee66cc84d8be8cc2bf454ad76ab62ca103811bd8904b24ac29e237822fb3a7797a298eee5c1ca574243c45dae85e9f2f5610ad60650e38b1ae12fcc7089948a9e91d203debce4d29b25c69e0987f128e993768d8b9b3dfccab3ec3a9343cca5f247368c2e2570699f97b820a505f5ff22ad604e105e3c14713f803c1b5abe3b87839098b31509953f331e5b43765f85add5d58f6a42a1f67f9261510fd24cd8531d1ba8182e74dc1afc3add0765926c9daff22c7098e60d9987f47f77b1dfca8e03eaa033ff5195197be86ef742d4b5ceecbce53332a03079fcd1deedd272830ecd246d3b7e50979ad64e3f285ce58a06ddb786258304cc344553d01288ede913d3dbe7a3238e7e17c7540c6636ed21f24d60002048602cde1faa5c7220f04b3acd494b82f88ebd46ce7d26ba93546a39a48b8bf21b504967e59eb65929fc2219cabaf512ef63e02670f90714fa6b49be1df0018e6e09fc6b7a15e90e199c36445e0f8814d8b77528b2945b7af15a0d4bad44b61b3e783f2783129cafd4b7321cee9b40c9f173bc279bf5c3e7540c46a323a63c58e21a75f143c15d62714b22ee960f197c0073356f72613b1634dab117a628420d8a75d8f0949584851a2f433769fcd51cf457c415cedda3a31d5e6ae8a1e11c51986ec18e2cc0c40931e0be752176cb5838f3aae528420a217fc55d3332f0546604ffe9f9b1b764dfc2f61929cd36404c4a1183b75273712493392cc0ac419fed2172a5d0cb07240f803a55102c656d007efde852e51fbb4fdcb135984f21cb863cd22fcdc2248afab40b56808135d149b7c0f1ee6c1a5d0dedce53698c9d5aa0e011446b1214b8ae7b274a302ae64d8d772a35f0c0178c9460d3ac7e661b989cd7237a135c2ac756a568e1bfd49c2a87e595ca82fbd0b11289d7bca317b491a1ad7c9e9d5758665d8beeaae8753774f94db4b59bb7d1cae563aa24b655239ab4a9fd4df95bad048ee2daccf85e2256777de41560a8c53a8a8b1951e0a7a80d335918c8f3960af8fe5158d5fe793aa4315b2d9e049c88144a68c79e844ab0e10e0a2f634d567941dc7e48287a4eeb1882dae", 0x1000}, {&(0x7f0000000040)="48ececa623f93c92be9a6e93257ab0babd1fb22f46dc720ab5c759f3ec68c21c93a0e76d4460931dd01989fa0bf67e524b3fd8db26fc002ccac6d49e6d47d061bf15ce7e03e022448175b645e83f547424c2cd5fbd6d2274564307e3f6e390bcf1e7", 0x62}, {&(0x7f00000013c0)="d2987a03b1685fda3f8459b2c89bd84ac0e69b7a19e811b847a389072e56aab1f92864b608e35d83f0da021a229db0ebbe1775e1cd771158d931f966e7d60b8d5acc8d876c5d3033a102fb1a0dfe47199ee72b5ed48736c2f25f09da727f5d8f0266a4d144d84ffbd1b987345650f41cd26308bf861fea7053054f969f24cfaa7fc0994b593865bd11ee1c5f9ea95858ba63493642ce1814f9ee5be919f76a72f6fce9290e89308a3e1af6ba913e8e9a576fdb60106ab30f66", 0xb9}, {&(0x7f00000015c0)="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", 0x1e4}], 0x5}, 0x0) [ 1972.545817] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1972.556301] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1972.557790] CPU: 0 PID: 827144 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1972.558903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.560282] Call Trace: [ 1972.560768] dump_stack+0x107/0x167 [ 1972.561338] sysfs_warn_dup.cold+0x1c/0x29 [ 1972.562008] sysfs_do_create_link_sd+0x122/0x140 [ 1972.562757] sysfs_create_link+0x5f/0xc0 [ 1972.563417] device_add+0x703/0x1c50 [ 1972.564028] ? devlink_add_symlinks+0x970/0x970 [ 1972.564780] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1972.565604] wiphy_register+0x1da6/0x2850 [ 1972.566268] ? wiphy_unregister+0xb90/0xb90 [ 1972.566962] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1972.567829] ieee80211_register_hw+0x23c5/0x38b0 [ 1972.568585] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1972.569343] ? net_generic+0xdb/0x2b0 [ 1972.569966] ? lockdep_init_map_type+0x2c7/0x780 [ 1972.570713] ? memset+0x20/0x50 [ 1972.571248] ? __hrtimer_init+0x12c/0x270 [ 1972.571912] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1972.572722] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1972.573461] ? hwsim_new_radio_nl+0x967/0x1080 [ 1972.574190] ? memcpy+0x39/0x60 [ 1972.574732] hwsim_new_radio_nl+0x991/0x1080 [ 1972.575456] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1972.576335] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1972.577369] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1972.578406] genl_family_rcv_msg_doit+0x22d/0x330 [ 1972.579168] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1972.580214] ? cap_capable+0x1cd/0x230 [ 1972.580842] ? ns_capable+0xe2/0x110 [ 1972.581446] genl_rcv_msg+0x36a/0x5a0 [ 1972.582081] ? genl_get_cmd+0x480/0x480 [ 1972.582730] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1972.583603] ? lock_release+0x680/0x680 [ 1972.584236] ? __lockdep_reset_lock+0x180/0x180 [ 1972.585011] netlink_rcv_skb+0x14b/0x430 [ 1972.585670] ? genl_get_cmd+0x480/0x480 [ 1972.586306] ? netlink_ack+0xab0/0xab0 [ 1972.586935] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1972.587686] ? is_vmalloc_addr+0x7b/0xb0 [ 1972.588342] genl_rcv+0x24/0x40 [ 1972.588880] netlink_unicast+0x6ce/0xa00 [ 1972.589545] ? netlink_attachskb+0xab0/0xab0 [ 1972.590263] netlink_sendmsg+0x90f/0xe00 [ 1972.590940] ? netlink_unicast+0xa00/0xa00 [ 1972.591638] ? netlink_unicast+0xa00/0xa00 [ 1972.592335] __sock_sendmsg+0x154/0x190 [ 1972.592993] ____sys_sendmsg+0x70d/0x870 [ 1972.593664] ? sock_write_iter+0x3d0/0x3d0 [ 1972.594358] ? do_recvmmsg+0x6d0/0x6d0 [ 1972.595010] ? SOFTIRQ_verbose+0x10/0x10 [ 1972.595704] ? __lockdep_reset_lock+0x180/0x180 [ 1972.596493] ___sys_sendmsg+0xf3/0x170 [ 1972.597136] ? sendmsg_copy_msghdr+0x160/0x160 [ 1972.597904] ? __fget_files+0x2cf/0x520 [ 1972.598561] ? lock_downgrade+0x6d0/0x6d0 [ 1972.599259] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.600127] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1972.601020] ? trace_hardirqs_on+0x5b/0x180 [ 1972.601727] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1972.602633] ? sockfd_lookup_light+0xe1/0x180 [ 1972.603385] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 1972.604194] __sys_sendmsg+0xe5/0x1b0 [ 1972.604827] ? __sys_sendmsg_sock+0x40/0x40 [ 1972.605540] ? __do_sys_futex+0x2bb/0x480 [ 1972.606238] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.607101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1972.607957] ? trace_hardirqs_on+0x5b/0x180 [ 1972.608671] do_syscall_64+0x33/0x40 [ 1972.609288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1972.610146] RIP: 0033:0x7f6c437f9b19 [ 1972.610762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.613792] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.615049] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 1972.616235] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 1972.617420] RBP: 00007f6c43853f6d R08: 0000000000000000 R09: 0000000000000000 [ 1972.618590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1972.619764] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 16:36:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 16:36:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000000480)) 16:36:11 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x6, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x1d4, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97", @nested={0xed, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r5}, @generic="b53c248718be40aefb6777b42655337de0da5bdea1958edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb46da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38992716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1d4}}, 0x0) [ 1972.925014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.966332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1972.990865] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1973.028358] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1973.030786] CPU: 0 PID: 827396 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1973.032735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1973.034644] Call Trace: [ 1973.035314] dump_stack+0x107/0x167 [ 1973.036306] sysfs_warn_dup.cold+0x1c/0x29 [ 1973.037275] sysfs_do_create_link_sd+0x122/0x140 [ 1973.038535] sysfs_create_link+0x5f/0xc0 [ 1973.039499] device_add+0x703/0x1c50 [ 1973.040506] ? devlink_add_symlinks+0x970/0x970 [ 1973.041762] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1973.043227] wiphy_register+0x1da6/0x2850 [ 1973.044359] ? wiphy_unregister+0xb90/0xb90 [ 1973.045595] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1973.047081] ieee80211_register_hw+0x23c5/0x38b0 [ 1973.048246] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1973.049335] ? net_generic+0xdb/0x2b0 [ 1973.050201] ? lockdep_init_map_type+0x2c7/0x780 [ 1973.051327] ? memset+0x20/0x50 [ 1973.052078] ? __hrtimer_init+0x12c/0x270 [ 1973.053022] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1973.054172] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1973.055211] ? hwsim_new_radio_nl+0x967/0x1080 [ 1973.056250] ? memcpy+0x39/0x60 [ 1973.057001] hwsim_new_radio_nl+0x991/0x1080 [ 1973.057996] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1973.059178] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1973.060673] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1973.062142] genl_family_rcv_msg_doit+0x22d/0x330 [ 1973.063232] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1973.064724] ? cap_capable+0x1cd/0x230 [ 1973.065621] ? ns_capable+0xe2/0x110 [ 1973.066464] genl_rcv_msg+0x36a/0x5a0 [ 1973.067338] ? genl_get_cmd+0x480/0x480 [ 1973.068235] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1973.069399] ? lock_release+0x680/0x680 [ 1973.070291] ? __lockdep_reset_lock+0x180/0x180 [ 1973.071351] netlink_rcv_skb+0x14b/0x430 [ 1973.072262] ? genl_get_cmd+0x480/0x480 [ 1973.073162] ? netlink_ack+0xab0/0xab0 [ 1973.074047] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1973.075076] ? is_vmalloc_addr+0x7b/0xb0 [ 1973.076004] genl_rcv+0x24/0x40 [ 1973.076743] netlink_unicast+0x6ce/0xa00 [ 1973.077662] ? netlink_attachskb+0xab0/0xab0 [ 1973.078663] netlink_sendmsg+0x90f/0xe00 [ 1973.079590] ? netlink_unicast+0xa00/0xa00 [ 1973.080555] ? netlink_unicast+0xa00/0xa00 [ 1973.081508] __sock_sendmsg+0x154/0x190 [ 1973.082413] ____sys_sendmsg+0x70d/0x870 [ 1973.083342] ? sock_write_iter+0x3d0/0x3d0 [ 1973.084290] ? do_recvmmsg+0x6d0/0x6d0 [ 1973.085173] ? SOFTIRQ_verbose+0x10/0x10 [ 1973.086109] ? __lockdep_reset_lock+0x180/0x180 [ 1973.087156] ___sys_sendmsg+0xf3/0x170 [ 1973.088043] ? sendmsg_copy_msghdr+0x160/0x160 [ 1973.089075] ? __fget_files+0x2cf/0x520 [ 1973.089969] ? lock_downgrade+0x6d0/0x6d0 [ 1973.090909] ? clockevents_program_event+0x14b/0x360 [ 1973.092066] ? __fget_files+0x2f8/0x520 [ 1973.092970] ? __fget_light+0xea/0x290 [ 1973.093857] __sys_sendmsg+0xe5/0x1b0 [ 1973.094713] ? __sys_sendmsg_sock+0x40/0x40 [ 1973.095691] ? trace_hardirqs_on+0x5b/0x180 [ 1973.096680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1973.097838] ? syscall_enter_from_user_mode+0x27/0x50 [ 1973.098998] do_syscall_64+0x33/0x40 [ 1973.099844] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1973.101001] RIP: 0033:0x7f6c437f9b19 [ 1973.101837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1973.105954] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.107669] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 1973.109267] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 1973.110866] RBP: 00007f6c43853f6d R08: 0000000000000000 R09: 0000000000000000 [ 1973.112486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1973.114097] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 [ 1973.326884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1973.333077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:12 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') creat(&(0x7f0000000140)='./file0\x00', 0x120) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="090000000000f3002e2f6682968e0b0c"]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x6, 0x7, 0x3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x71) syz_io_uring_complete(0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x4) 16:36:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfe7b}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00007f7000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = dup(r2) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r5, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe}]) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat(r4, &(0x7f0000000040)='./file0\x00', 0x20100, 0x102) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfff}, 0xe) sendmmsg(r2, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) socket$inet(0x2, 0x3, 0x8001) mmap(&(0x7f00007f7000/0x1000)=nil, 0x1000, 0x3000001, 0x12, 0xffffffffffffffff, 0x436fb000) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x1163868, &(0x7f0000000300)=ANY=[]) 16:36:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0}}, 0x14008805) 16:36:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x2, 0x2, 0x801, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 16:36:12 executing program 0: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) kcmp(r1, 0x0, 0x0, r2, r3) capset(&(0x7f0000000100)={0x20071026}, &(0x7f00000001c0)={0x6, 0x7, 0x1, 0x80000001, 0x4, 0x8001}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x8, 0x4, 0x1, 0x3ff, r1}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x1d4, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x14, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251c743092f"]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97", @nested={0xed, 0x3f, 0x0, 0x1, [@typed={0x8, 0x4f, 0x0, 0x0, @fd=r5}, @generic="b53c248718be40aefb6777b42655337de0da5bdea1958edf6a4147ad694e4099be9302ed38c259478fed6a3d053e55cf27d101cb0fbc96be6d252d0f15053719ad892bbff5d46ddbc9f47089465bccbfb46da59b262dc6f43f7720bf6a4aad8054e503cb1458fd8b2c367e3a200c311e0491de3eccc043c7feca4bfb78e1c83c9f5bcd479beaa0056b61e14c429052194eb9c4bd6224747ba38992716262b429f7c60d93504ce7d543033251f75c23c36ca47b06a1b037dd433d8d1ec6", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@remote}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x1d4}}, 0x0) 16:36:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) 16:36:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:12 executing program 7: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(0x0, 0x0, &(0x7f0000001140)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) [ 1973.452823] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1973.490400] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1973.492800] CPU: 0 PID: 827478 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 1973.494438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1973.496331] Call Trace: 16:36:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000004700)=[{{&(0x7f00000008c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x810) [ 1973.496934] dump_stack+0x107/0x167 [ 1973.497915] sysfs_warn_dup.cold+0x1c/0x29 [ 1973.498888] sysfs_do_create_link_sd+0x122/0x140 [ 1973.499980] sysfs_create_link+0x5f/0xc0 [ 1973.500908] device_add+0x703/0x1c50 [ 1973.501761] ? devlink_add_symlinks+0x970/0x970 [ 1973.502820] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1973.504034] wiphy_register+0x1da6/0x2850 [ 1973.504992] ? wiphy_unregister+0xb90/0xb90 [ 1973.505989] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1973.507205] ieee80211_register_hw+0x23c5/0x38b0 [ 1973.508304] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1973.509396] ? net_generic+0xdb/0x2b0 [ 1973.510269] ? lockdep_init_map_type+0x2c7/0x780 [ 1973.511355] ? memset+0x20/0x50 [ 1973.512111] ? __hrtimer_init+0x12c/0x270 [ 1973.513060] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1973.514219] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1973.515272] ? hwsim_new_radio_nl+0x967/0x1080 [ 1973.516317] ? memcpy+0x39/0x60 [ 1973.517073] hwsim_new_radio_nl+0x991/0x1080 [ 1973.518085] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1973.519277] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1973.520800] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1973.522283] genl_family_rcv_msg_doit+0x22d/0x330 [ 1973.523389] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1973.524882] ? cap_capable+0x1cd/0x230 [ 1973.525783] ? ns_capable+0xe2/0x110 [ 1973.526636] genl_rcv_msg+0x36a/0x5a0 [ 1973.527522] ? genl_get_cmd+0x480/0x480 [ 1973.528422] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1973.529602] ? lock_release+0x680/0x680 [ 1973.530501] ? __lockdep_reset_lock+0x180/0x180 [ 1973.531568] netlink_rcv_skb+0x14b/0x430 [ 1973.532488] ? genl_get_cmd+0x480/0x480 [ 1973.533387] ? netlink_ack+0xab0/0xab0 [ 1973.534280] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1973.535320] ? is_vmalloc_addr+0x7b/0xb0 [ 1973.536246] genl_rcv+0x24/0x40 [ 1973.536994] netlink_unicast+0x6ce/0xa00 16:36:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) [ 1973.537926] ? netlink_attachskb+0xab0/0xab0 [ 1973.539021] netlink_sendmsg+0x90f/0xe00 [ 1973.539975] ? netlink_unicast+0xa00/0xa00 [ 1973.540950] ? netlink_unicast+0xa00/0xa00 [ 1973.541919] __sock_sendmsg+0x154/0x190 [ 1973.542824] ____sys_sendmsg+0x70d/0x870 [ 1973.543764] ? sock_write_iter+0x3d0/0x3d0 [ 1973.544721] ? do_recvmmsg+0x6d0/0x6d0 [ 1973.545613] ? SOFTIRQ_verbose+0x10/0x10 [ 1973.546540] ? __lockdep_reset_lock+0x180/0x180 [ 1973.547619] ___sys_sendmsg+0xf3/0x170 [ 1973.548505] ? sendmsg_copy_msghdr+0x160/0x160 [ 1973.549554] ? __fget_files+0x2cf/0x520 [ 1973.550456] ? lock_downgrade+0x6d0/0x6d0 [ 1973.551417] ? clockevents_program_event+0x14b/0x360 [ 1973.552574] ? __fget_files+0x2f8/0x520 [ 1973.553493] ? __fget_light+0xea/0x290 [ 1973.554391] __sys_sendmsg+0xe5/0x1b0 [ 1973.555261] ? __sys_sendmsg_sock+0x40/0x40 [ 1973.556270] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1973.557475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1973.558637] ? trace_hardirqs_on+0x5b/0x180 [ 1973.559630] do_syscall_64+0x33/0x40 [ 1973.560472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1973.561635] RIP: 0033:0x7f6c437f9b19 [ 1973.562472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1973.566638] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1973.568368] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 1973.569986] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000a [ 1973.571609] RBP: 00007f6c43853f6d R08: 0000000000000000 R09: 0000000000000000 [ 1973.573223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1973.574840] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 16:36:12 executing program 6: tkill(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x27ff, &(0x7f0000000080)={0x0, 0x1762, 0x1}, &(0x7f0000000000/0xf000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000200)) io_uring_enter(r1, 0x1e2, 0x0, 0x1, &(0x7f0000000040)={[0x401]}, 0x8) [ 1973.751091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1973.766581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:12 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') creat(&(0x7f0000000140)='./file0\x00', 0x120) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="090000000000f3002e2f6682968e0b0c"]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x6, 0x7, 0x3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x71) syz_io_uring_complete(0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x4) 16:36:13 executing program 7: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(0x0, 0x0, &(0x7f0000001140)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) [ 1974.127894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) 16:36:13 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7fff, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount$cgroup(0x0, 0x0, 0x0, 0x200480, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x482200, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x10) futimesat(r2, &(0x7f0000000000)='./mnt\x00', 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) openat(0xffffffffffffffff, &(0x7f0000000300)='mnt/encrypted_dir\x00', 0x2100, 0x3) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18}, 'mnt/encrypted_dir\x00'}) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x5b) 16:36:13 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001200)=""/4081, 0x742) getdents(r0, &(0x7f0000000640)=""/98, 0x62) getdents(r0, &(0x7f0000000380)=""/151, 0x72) 16:36:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') creat(&(0x7f0000000140)='./file0\x00', 0x120) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="090000000000f3002e2f6682968e0b0c"]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x6, 0x7, 0x3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x71) syz_io_uring_complete(0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x4) 16:36:13 executing program 7: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(0x0, 0x0, &(0x7f0000001140)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) 16:36:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) [ 1974.405104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:13 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) [ 1974.433147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:13 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f00000001c0)=0x40000000000f, 0x8, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3e4bed71894973fa) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') creat(&(0x7f0000000140)='./file0\x00', 0x120) mlock(&(0x7f0000ffa000/0x6000)=nil, 0x6000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="090000000000f3002e2f6682968e0b0c"]) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000180)=0x6, 0x7, 0x3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x71) syz_io_uring_complete(0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x4) 16:36:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0xfffffffd, &(0x7f0000000440), 0x0, &(0x7f00000004c0)) 16:36:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 7: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) close(0xffffffffffffffff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getresgid(0x0, 0x0, &(0x7f0000001140)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESHEX]) [ 1974.757025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x9}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1975.078222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1975.104532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1975.424961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0xf}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:14 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x37fe, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x50001, 0x36e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:36:14 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4, 0x3, &(0x7f0000000300)=[{0x0, 0x0, 0x7fff}, {&(0x7f00000000c0)="c38cf7bc4643814e0c3c102f3b75e3c485e1953666867ff0b760954b5332fb483e5202228f1d3639fb7e217fc1641ed544264d6d64acb87d45fd283a67394a4e2e2701aa50bb03876578363361aeef9122b3f11fc180a7a88078783617379e9d50a70aaa5a7cb9416764cc79f78aaa19e3233560c4a9b6170a115d98d65791cb814e7913658915c75934144bdfad8f323895925d58061f0cfee517911f", 0x9d}, {&(0x7f0000000180)="5bffa097ec44ff12ea1e69793d84533c7cb8a98876a1d69640b9350e43bd6dbde6d292e3ec889a2f997ed8ca47e1ce40613b86425c9456f874799fb3e850dbcfeb73af445005e7561b8047b6d9437d7a6c73b62e7124fb2699949fe472ecbf145e1c365cd2287639641d1a0c04144114d1bc776d64b3bf20c3e73b4249f23d53201bfb8491e7b24e3c110cf6fa7d1d67d5ee06beeb1646190fdbb6bc2b1b44a917d0612a21f3a5a8a4911756e842a9b14ac53892cdeca6ea25b9228b5bc75aed64cee705e38f18640770a2a4d5d901853a031c6cc4cddff8c22897481b3c52649adbfe44f9e62e445b1bbfc9af83", 0xee, 0x7}]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) readv(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000001500)=""/4092, 0xffc}, {&(0x7f0000000380)=""/68, 0x44}], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffe68, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffff}, r1, 0x3, 0xffffffffffffffff, 0xf2bbbeefa2dc2e6f) timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x82614, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x48000, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0x20000, 0x80) r3 = syz_open_dev$vcsu(&(0x7f0000000440), 0x1, 0x10000) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000480)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="999e02009c"]}]}, 0x24}}, 0x0) 16:36:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 16:36:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r0, 0x0, &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="23212a2e2f667ab6ff752d45ac2a0920d397d004b0e73920cb23d59d88c9a54b8529ac480f842c5cad82d96ad936798df7d6005757424ea5fbda24f27495c56e26ed37523d5e419b50c3d20b2c659d51b789bea2b32ceaa8b22ed6c5d5617409ef"], 0xb8) 16:36:14 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:14 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0xfffffffd, &(0x7f0000000440), 0x0, &(0x7f00000004c0)) 16:36:14 executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000016580)={0x0, 0x0, &(0x7f0000016540)={&(0x7f0000000080)={0x34, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fffffff}]}, 0x34}}, 0x0) [ 1975.887871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1975.955018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:15 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 16:36:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x7, 0x0, 0x0, 0x1, [@generic="487fec"]}]}, 0x24}}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x501000, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x40, 0x3f, 0xe1, 0x7f, 0x0, 0x81, 0x0, 0x10, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x93eaa28efd14134, 0x4, 0x3, 0x2, 0x6, 0xfff, 0x6, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x6, r0, 0x9) 16:36:15 executing program 3: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@loopback}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) rename(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='mnt/encrypted_dir\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r5}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@mcast2, r5}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@loopback}, 0x14) stat(&(0x7f0000000240)='mnt/encrypted_dir\x00', &(0x7f0000000480)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYRES64=r6]) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', r5, 0x0, 0x1, 0xff, 0x8, 0xd0, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8000, 0x1f, 0x7}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000300)={@local, 0x7}) [ 1976.249860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1976.288301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:15 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x37fe, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x50001, 0x36e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:36:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 16:36:16 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x37fe, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x50001, 0x36e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 16:36:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3eefc4327c35d5f4c097347fb24dc13068cf4ada46207000062ea0b5e364eee2b1dc94c1742ea96761c683f90df00000001002000"}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="480300006054e9104fa763cd6a56c75626d0cd46c762a0b532eccc0c03ccbb4227b2a796eacec089ce649bc91bbc2806f86011bd0289c9d260ef", 0x3a}], 0x1}, 0x0) 16:36:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000100)={[0x80000001]}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x181) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 16:36:16 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0xfffffffd, &(0x7f0000000440), 0x0, &(0x7f00000004c0)) 16:36:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup2(r1, r0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) 16:36:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:16 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000100)={[0x80000001]}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x181) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 16:36:16 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 16:36:16 executing program 5: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x37fe, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x50001, 0x36e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1977.142779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev}, 0x0, r2}) 16:36:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="a2", 0xfd34}], 0xc0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 16:36:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@name={'name', 0x3d, ','}}]}) 16:36:16 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/212, 0xd4}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendfile(r2, r1, 0x0, 0x500000001) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)=r5) [ 1977.515229] cgroup: Bad value for 'name' [ 1977.517830] cgroup: Bad value for 'name' [ 1982.076561] Bluetooth: hci4: command 0x0409 tx timeout [ 1984.124618] Bluetooth: hci4: command 0x041b tx timeout [ 1986.172686] Bluetooth: hci4: command 0x040f tx timeout [ 1987.516915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.519287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.523065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1987.587010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.589436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.593986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1987.767246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1987.778387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1988.087722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000100)={[0x80000001]}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x181) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) 16:36:27 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140), 0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x79ee, &(0x7f00000002c0)={0x0, 0xcf11, 0x10, 0x400, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="8f4275dc430600000f00740000009700000000000000000000e1b6bceecf570f141854a98dcc3f8bd7c0722d0dc86299244095c27ab1727387e490578b77f649ae4574ad2ec69cf1cccb755bf23b61f613fca822772ca2f555fe3c85ff587a59b3874403d587440608b77d5b7138552efc41a7b08641de2873e8653dd16c210009", @ANYRES32, @ANYRES64=r0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) 16:36:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x28, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt(r1, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 16:36:27 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:27 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fchown(r0, 0x0, 0x0) 16:36:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5bc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffe0, 0x8}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = timerfd_create(0x9, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xf46b}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) 16:36:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000240), 0x0, 0x0, 0xfffffffd, &(0x7f0000000440), 0x0, &(0x7f00000004c0)) 16:36:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x12}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1988.188805] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 1988.221712] Bluetooth: hci4: command 0x0419 tx timeout [ 1988.254913] kauditd_printk_skb: 18 callbacks suppressed [ 1988.254949] audit: type=1326 audit(1752942987.388:5733): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1988.310972] audit: type=1326 audit(1752942987.407:5734): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1988.323068] audit: type=1326 audit(1752942987.419:5735): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1988.331498] audit: type=1326 audit(1752942987.420:5736): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1988.339767] audit: type=1326 audit(1752942987.423:5737): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:36:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40406, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000100)={[0x80000001]}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x181) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) [ 1988.382060] audit: type=1326 audit(1752942987.423:5738): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830465 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:36:27 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fchown(r0, 0x0, 0x0) [ 1988.478057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1988.603725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2a040600) unshare(0x60020000) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1840, 0x0) 16:36:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5bc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffe0, 0x8}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = timerfd_create(0x9, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xf46b}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) [ 1988.638311] audit: type=1326 audit(1752942987.790:5739): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1988.643786] audit: type=1326 audit(1752942987.791:5740): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:36:27 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140), 0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x79ee, &(0x7f00000002c0)={0x0, 0xcf11, 0x10, 0x400, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="8f4275dc430600000f00740000009700000000000000000000e1b6bceecf570f141854a98dcc3f8bd7c0722d0dc86299244095c27ab1727387e490578b77f649ae4574ad2ec69cf1cccb755bf23b61f613fca822772ca2f555fe3c85ff587a59b3874403d587440608b77d5b7138552efc41a7b08641de2873e8653dd16c210009", @ANYRES32, @ANYRES64=r0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) [ 1988.694223] audit: type=1326 audit(1752942987.791:5741): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=830779 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:36:27 executing program 3: ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0/../file0', [], 0xa, "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"}, 0x17e) [ 1993.660579] Bluetooth: hci4: command 0x0409 tx timeout [ 1995.708680] Bluetooth: hci4: command 0x041b tx timeout [ 1997.756549] Bluetooth: hci4: command 0x040f tx timeout [ 1998.996204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.998812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.002970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1999.063754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.066418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.075069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1999.264652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1999.278798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1999.588731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1999.594734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1999.596583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:38 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fchown(r0, 0x0, 0x0) 16:36:38 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140), 0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x79ee, &(0x7f00000002c0)={0x0, 0xcf11, 0x10, 0x400, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="8f4275dc430600000f00740000009700000000000000000000e1b6bceecf570f141854a98dcc3f8bd7c0722d0dc86299244095c27ab1727387e490578b77f649ae4574ad2ec69cf1cccb755bf23b61f613fca822772ca2f555fe3c85ff587a59b3874403d587440608b77d5b7138552efc41a7b08641de2873e8653dd16c210009", @ANYRES32, @ANYRES64=r0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) 16:36:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000140)) 16:36:38 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:38 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:38 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5bc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffe0, 0x8}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = timerfd_create(0x9, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xf46b}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) 16:36:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x14}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:38 executing program 6: keyctl$update(0x2, 0x0, 0x0, 0x36) [ 1999.712722] audit: type=1326 audit(1752942998.864:5742): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831550 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1999.747817] audit: type=1326 audit(1752942998.887:5743): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831550 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1999.784641] audit: type=1326 audit(1752942998.887:5744): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831550 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1999.804560] Bluetooth: hci4: command 0x0419 tx timeout 16:36:38 executing program 1: stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x20) 16:36:39 executing program 6: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x4, 0x40, 0x1, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7800, 0x20, 0x2, 0x7}}) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c48e6e70718d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="909f4aaa8b44"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="213ee0a42d38"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdc93}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004000}, 0x34000010) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0) lseek(r0, 0x0, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, 0x0, 0x11) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)) sendfile(r1, r2, 0x0, 0x100000001) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x488040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:36:39 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) fchown(r0, 0x0, 0x0) [ 1999.974081] audit: type=1326 audit(1752942999.126:5745): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 1999.982465] audit: type=1326 audit(1752942999.134:5746): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 2000.010708] audit: type=1326 audit(1752942999.134:5747): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 [ 2000.048638] audit: type=1326 audit(1752942999.134:5748): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=831566 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c437f9b19 code=0x7ffc0000 16:36:39 executing program 5: mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000140), 0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ff7000/0x4000)=nil, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r1 = epoll_create(0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x79ee, &(0x7f00000002c0)={0x0, 0xcf11, 0x10, 0x400, 0xa0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="8f4275dc430600000f00740000009700000000000000000000e1b6bceecf570f141854a98dcc3f8bd7c0722d0dc86299244095c27ab1727387e490578b77f649ae4574ad2ec69cf1cccb755bf23b61f613fca822772ca2f555fe3c85ff587a59b3874403d587440608b77d5b7138552efc41a7b08641de2873e8653dd16c210009", @ANYRES32, @ANYRES64=r0]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000003}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000180)=0x800, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) [ 2000.215010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2000.222960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5bc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000011c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0xa, 0x0, "0792ade4eff3d51ae1c35206d8098758db6a56ba977a856d7c576d40c2e65ca2d5773618a27635f95bd9c12b6bdda484bb130ef53e11060c0c7d9a04e184707c41a839dbdac13e41c451f4d88987a291"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffe0, 0x8}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r1 = timerfd_create(0x9, 0x80000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xf46b}) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x10, 0x11, 0x0, 0x1, [@generic="809801a7b0c7dba09475f251"]}]}, 0x24}}, 0x0) 16:36:39 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@delsa={0x28, 0x11, 0x309, 0x0, 0x0, {@in=@private, 0x0, 0x0, 0x32}}, 0x28}}, 0x0) 16:36:39 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') 16:36:40 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffff) 16:36:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffff800, 0x1500, &(0x7f0000000200)=[{&(0x7f0000000080)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000140)="ed41000000080000daf4655fddf4655fddf4655f000000000000040040", 0x1d, 0x2100}], 0x2004489, &(0x7f0000000180)={[{@nombcache}]}) 16:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x15}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:40 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d73, 0x0, 0x2, 0xbb, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x0, r4}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x81, 0x81, 0x3, 0x0, 0xfffffffffffffeff, 0x10, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xbcf, 0x1}, 0x0, 0x2, 0x9, 0x3, 0x1, 0x101, 0x1f, 0x0, 0x1f, 0x0, 0x10000}, r4, 0x2, r5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x84) faccessat2(r6, &(0x7f0000000300)='./file1\x00', 0x88, 0x100) 16:36:40 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002010c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xf38493bdae0e4bc4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x494040, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x61, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 16:36:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x0) [ 2001.016902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2001.027540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:40 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000340)={0x1, 0x81, 0x0, 0x6, 0x5}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000002400), 0x0, 0x7ff, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) fdatasync(0xffffffffffffffff) poll(&(0x7f0000000140), 0x0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000000)) unshare(0x48020200) fcntl$dupfd(r2, 0x406, r1) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/100, 0x64, 0x40000100, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) 16:36:40 executing program 3: r0 = eventfd(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x2, &(0x7f0000000500)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r2, 0x2, &(0x7f0000000740)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 16:36:40 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddc513}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:36:40 executing program 6: restart_syscall() unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) creat(&(0x7f0000000400)='./file0\x00', 0x68) [ 2001.334651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2001.352816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:36:40 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2001.398765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.399707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.400666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:36:40 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000200)='logon\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000600)="48ec7ad3ddfa0ca2221701732e4985943c43f1fc51c5da0012feed28c134c7929eda262f4b1142e447c55295f0aa80c59b8cf91befce392c7c4c335893ed95f03ced2ed3d2fe31b59b243f8795bdd76224e78af3fa11135393968089a27059f0277726968d72b3a75eb009e6e1e6d9122edd0c0a865dbddc412cf85d3a34fa21b5265bdb9626aae2db7f5573ecb4a06af507d1bb4df4dc500e263d7bfa9cf018b1930c17719d62bb7ac1155c4234dc932493d0071f10853392708b1448597e51f98a1e55abfc1c8367f68de36e15bc9cec", 0xd1, 0xfffffffffffffffa) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xb5, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dc"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r4, 0x800000000000202) unshare(0x4a060400) 16:36:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x16}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:40 executing program 0: r0 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x21c0, 0x0, 0x0, 0x0, 0x0) 16:36:40 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 2001.585238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:40 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddc513}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2001.703371] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2001.760408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2001.761455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2001.762652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2006.332706] Bluetooth: hci4: command 0x0409 tx timeout [ 2008.381568] Bluetooth: hci4: command 0x041b tx timeout [ 2010.428696] Bluetooth: hci4: command 0x040f tx timeout [ 2012.146697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.149111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.187668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2012.207639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2012.209746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2012.212901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2012.400810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2012.414949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2012.476577] Bluetooth: hci4: command 0x0419 tx timeout [ 2012.726316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:51 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r2, 0x0) 16:36:51 executing program 6: restart_syscall() unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) creat(&(0x7f0000000400)='./file0\x00', 0x68) 16:36:51 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddc513}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:36:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002010c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xf38493bdae0e4bc4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x494040, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x61, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 16:36:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 16:36:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x17}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:51 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) setregid(0x0, 0x0) 16:36:51 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2012.805815] audit: type=1326 audit(1752943011.957:5749): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 [ 2012.815399] audit: type=1326 audit(1752943011.958:5750): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 [ 2012.823194] audit: type=1326 audit(1752943011.958:5751): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 [ 2012.832292] audit: type=1326 audit(1752943011.963:5752): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 [ 2012.839164] audit: type=1326 audit(1752943011.966:5753): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 [ 2012.845500] audit: type=1326 audit(1752943011.972:5754): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=833183 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d5e09b19 code=0x7ffc0000 16:36:52 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) [ 2012.888352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2013.028264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2013.057972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:52 executing program 6: restart_syscall() unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) creat(&(0x7f0000000400)='./file0\x00', 0x68) 16:36:52 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 16:36:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20}, 0x0) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 16:36:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r2, 0x0) 16:36:52 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddc513}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:36:52 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2013.375926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:52 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r2, 0x0) [ 2013.396016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:36:52 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) [ 2013.485043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2013.486841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2013.490406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:36:53 executing program 6: restart_syscall() unshare(0x8000000) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/212, 0xd4}, {0x0}, {&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/229, 0xe5}], 0x5}, 0xffffffff}], 0x1, 0x21, &(0x7f0000000900)={0x0, 0x3938700}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) creat(&(0x7f0000000400)='./file0\x00', 0x68) 16:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x18}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:53 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 16:36:53 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffc, r2, 0x0) 16:36:53 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 16:36:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002010c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xf38493bdae0e4bc4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x494040, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x61, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 16:36:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x180000030) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r1, 0x402, 0x180000030) 16:36:53 executing program 2: syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @random="7021a27bffc4", @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010100, @dev}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 2014.026425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:53 executing program 2: r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = epoll_create(0x3ff) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) [ 2014.068015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:53 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0x7f, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0xdcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3f, 0x7, 0x59}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0xfc, 0xa1}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x2, 0xff, 0x0, 0x40, 0x8}, 0x1b, &(0x7f0000000280)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x0, 0x14, 0x4}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x6, 0xff0f, 0x9}]}}) 16:36:53 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 16:36:53 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) getuid() keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='%\x00', 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, 0x0, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) 16:36:53 executing program 7: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 16:36:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x45, 0x4) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2014.416533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2014.426025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:53 executing program 2: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d53, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x329}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) 16:36:53 executing program 3: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8e6f89cb9482ccd4c", 0x17}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x5, 0x101, 0xffff}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) lseek(r1, 0x4, 0x1) r6 = creat(&(0x7f0000000640)='./file0\x00', 0x13b) r7 = syz_io_uring_setup(0x67be, &(0x7f0000000380)={0x0, 0x22cc, 0x2, 0x3, 0x249, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r7, {r0}}, './file0\x00'}) syz_io_uring_submit(0x0, r8, &(0x7f0000000500)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x80000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2007, @fd_index=0x2, 0x2, 0x4, 0xaf, 0x1c, 0x1, {0x1}}, 0x0) 16:36:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x19}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:53 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0/../file0', [], 0xa, '\r'}, 0x15) 16:36:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:53 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 16:36:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(r0, 0x2, 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 16:36:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1002010c}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0xf38493bdae0e4bc4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x40011) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x494040, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x61, &(0x7f00000000c0)=0xa2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) [ 2014.852323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2014.865138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2014.872813] audit: type=1326 audit(1752943014.015:5755): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=834259 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9275b5eb19 code=0x7ffc0000 [ 2014.880174] 9pnet: Insufficient options for proto=fd [ 2014.883428] audit: type=1326 audit(1752943014.035:5756): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=834259 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f9275b5eb19 code=0x7ffc0000 [ 2014.897205] audit: type=1326 audit(1752943014.048:5757): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=834259 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9275b5eb19 code=0x7ffc0000 [ 2014.924549] audit: type=1326 audit(1752943014.048:5758): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=834259 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9275b5eb19 code=0x7ffc0000 16:36:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB='fiDter'], &(0x7f0000000040)=0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) write$P9_RWALK(r0, &(0x7f0000000000)={0x30, 0x6f, 0x0, {0x3, [{}, {}, {}]}}, 0x30) 16:36:54 executing program 2: r0 = io_uring_setup(0x3de1, &(0x7f0000000200)) r1 = eventfd(0x0) r2 = dup2(r0, r1) io_uring_register$IORING_REGISTER_FILES(r2, 0x3, &(0x7f0000000100), 0x0) 16:36:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(r0, 0x2, 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 16:36:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) [ 2015.174331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1a}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) [ 2015.399372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2015.420316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2015.753310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0xee) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:36:54 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(r0, 0x2, 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 16:36:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:54 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x43) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080)="9b092f6d4da7d173fbc970301e3efff493a04ced5782a5cd6755bbcc95af47e62284", 0x22, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x2f, 0x2, 0x6a, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 16:36:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x80, 0x80, 0x3, 0x1f, 0x0, 0x100, 0x11000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x240, 0x40, 0x0, 0x3, 0x4, 0x5, 0x1, 0x0, 0x2, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 16:36:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:55 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) read(r0, &(0x7f0000019340)=""/102400, 0x19000) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0xfffffffd, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = io_uring_setup(0xd58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0800}]}) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000004c0)=0xfffffffffffff801) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000d00)=[0xffffffffffffffff], 0x1) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/168, 0xa8}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/108, 0x6c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000200000000000000001000000010000001a5abd266a3f929f18fff75085a90dc78f3ff4a38f201d2b75847c542b3b6238673ad6e21429eebe20d8206b44cd3cf73612be", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78}, 0x10040) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000019300)='./file1\x00', 0x0, &(0x7f000001a440), 0x0) 16:36:55 executing program 2: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@hci}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 16:36:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(r0, 0x2, 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044008) syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) 16:36:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x2) 16:36:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x171, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x10007, 0xffffffff, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000080)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0xa41, 0x44) sendfile(0xffffffffffffffff, r3, 0x0, 0x6) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000004, 0x110, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r3, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_CLOSE={0x13, 0x1}, 0x1) syz_io_uring_setup(0x5548, &(0x7f00000002c0)={0x0, 0xf22b, 0x2, 0x2, 0x3cc, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000400)) r5 = inotify_init1(0x800) copy_file_range(0xffffffffffffffff, &(0x7f0000000180)=0x8, r5, &(0x7f0000000280)=0x714, 0x0, 0x0) accept$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) syz_io_uring_setup(0x4d4f, &(0x7f0000000540)={0x0, 0x800e0d6, 0x7, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)="a5648e4d695b2551503cf7f8c076df64d065721731377049196fa5b7eab4da39106ece58b6c5c0f2f8d562b5001dee332a81c37cb91dabe4baec880fe68804965ac57c31dcfd0349e6ad16b81008158f3d075cb16d0214003783fe9f6b7c8afb540f48679c00efcedc1a271442e1edeaeb7c290085b455ec2f363a0ed5800b0d6006f4bba8f404763cec7500218f59851688a60651031ea939a3c59fd10f8dd0fc610c23fe940efaba7181c332c1edca6555e909984f4cd1baaff953b93c97c4c8c7667e721e9c7c18fa28ff315b4772edacec7806fadc4a744ef883b84e3aa4493278bc650407bd81cda70d", 0xec, 0x40002041, 0x1}, 0x4) lseek(r1, 0x1, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 2016.076004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.087750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2016.417822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.424256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, 0x0) 16:36:55 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x80, 0x80, 0x3, 0x1f, 0x0, 0x100, 0x11000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x240, 0x40, 0x0, 0x3, 0x4, 0x5, 0x1, 0x0, 0x2, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 16:36:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x2) 16:36:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x35880}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000000000000052e", @ANYRES32, @ANYBLOB="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"/438], 0x18}, 0x0) r2 = dup(r1) io_uring_enter(0xffffffffffffffff, 0x186e, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0xbe7, 0x4) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:36:55 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) 16:36:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1c}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0x162) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) setsockopt$inet_mreqn(r2, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xdc0, 0x10000, 0x0, 0x3, 0x7}) setsockopt$inet_mreqn(r2, 0x0, 0x17, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000001c0)='.\x00', 0x7, 0x3, &(0x7f0000000340)=[{&(0x7f0000000200)="b2e98aff6e74d18a45020aba5c", 0xd, 0xa960}, {&(0x7f00000002c0)="a4fbf492329b0aef0c4cf47cf548912226f383eb77037f85ff5a03b80c439682e7b87e37f98a80c4685feea1f12827a83a1428ec285320a8db5d0ed218af0313cc99b0dc1b2d27bae726e8f242b1cdecd395b2648174abbead9986ecb088979c71980a74fa33775dc974c5c5", 0x6c, 0x6}, {&(0x7f0000000240)="ace4b373df3ffc170367d2a6d7884a15372c59ce5cb559bd0ba9752c91d57356263c54619ff0532c25655bdc001dfab987cfc516e1f1baf60877cb", 0x3b, 0x3}], 0x2048009, &(0x7f0000000580)={[{@huge_within_size}, {@size={'size', 0x3d, [0x34]}}, {@huge_always}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x74, 0x32, 0x2d, 0x36, 0x70]}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@uid={'uid', 0x3d, 0xee01}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, ':)\\\"-{}$%/[&\\,{'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xcf#Bz\xe5\xceM\xa7\xa1Ux\xa5d_\xa6\x0359\xba\xd6T\xb3t\xd2\x9e/`\x99-\xd1m\x1b\xdc\xe7\x02\xdd\xd3K\r\x93h&Rd\\oC\x1dws_\xba\xb6\x1e:\xc5_\xa4m\x16\xb4\x84\xa2\x17\x97\x96K\x91\xff\x06-Sx\xa4\x9e\x1e\xc8t[\x86\xa0\x81E`UT\xa0\x98HOo\xf3\xda\xec\xf6C\x9c\b\x00\x00\x00\x00\x00\x00\x00\xd5\xa0\xce\xb8\xe3.b\xe8\x11\x8e-\xee\x15#A8f\xad\x174\xe6M\xab\xb1r\x82:\xc6\x14\x85\xcdd\x96\xd8\xa2\xf7K\xc7\xd6nr\xf6\a\x92^\x03\x9d\xafEkig\xc2f>\x8f@\xf7\x92\xd7\x93\x9e\xee\xb5\xecUI\xb4\f\x04\xd7c\xe6h!\xdf\xd2\xc9\x00\xfe\'\xd5\xe3\xfb\fSx\xc4\x97\xd5V\xa0\x13\x13G2,!\xc5\xa8\xda\xcb\xd4\xd3\xba\x1c\xea\x8d\x8b*6\xf0\xe9uS\xb5F\x81\xa9\"\xd5\xd3\x17\xe6xk\x94\x03\xcc:\x0eB]\x15\xee\xa7\x8b\xe1\x96\b%\\8\x03\x8f\x9f\\\xd3\r\xb3s\xb4\xf1\x872\xd21d)\xcb\xdb\x93z\xe7h\xe7\xc0\xd8\x814f:+z\xd5V\xc9n!\xc9\x89\x05~\xd9\xd7<\xbb\x1b\x8b\x8f/\xcb\xb2u|\xbd\xf4P\\\x12\x04\xb8\tB\xcb\xca\xc3\xc4a\xa0\xd1\xa3\xf3$\x95\x94\xdb\x8a?\x86\x03@\x1a\xf7:\xba?\x97\x04z\xa5i\x17\xf9O\xdbI\xb8O$K=\x9f'}}, {@hash}, {@appraise}, {@euid_gt}, {@dont_measure}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 16:36:55 executing program 2: semget$private(0x0, 0x4, 0x0) 16:36:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x2) 16:36:55 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, r1+60000000}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{r2, r3+60000000}}, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1a3ec2bfed25ad67}, 0x80000001) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 2016.664807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:55 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x2e, 0x1, 0x0, 0x0, {}, [@typed={0x1a, 0x0, 0x0, 0x0, @str='\xe4\xca\xd0\\\x9a\xc8\\/\xe6A\x04m`E\xb2 |^8\xddY}'}]}, 0x30}}, 0x0) [ 2016.687899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:55 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@uname={'uname', 0x3d, '\xdc.:-\xbd'}}]}}) 16:36:55 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x80, 0x80, 0x3, 0x1f, 0x0, 0x100, 0x11000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x240, 0x40, 0x0, 0x3, 0x4, 0x5, 0x1, 0x0, 0x2, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) [ 2016.771098] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2017.008148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x2) 16:36:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x35880}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000000000000052e", @ANYRES32, @ANYBLOB="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"/438], 0x18}, 0x0) r2 = dup(r1) io_uring_enter(0xffffffffffffffff, 0x186e, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0xbe7, 0x4) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:36:56 executing program 6: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000004c0)={[{@fat=@nocase}, {@shortname_win95}]}) 16:36:56 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0xf5bf9999e3596c9b) ftruncate(r3, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0x0, 0x7681b861}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 16:36:56 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, r1+60000000}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{r2, r3+60000000}}, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1a3ec2bfed25ad67}, 0x80000001) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 16:36:56 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) 16:36:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x1d}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:56 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x80, 0x80, 0x3, 0x1f, 0x0, 0x100, 0x11000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x240, 0x40, 0x0, 0x3, 0x4, 0x5, 0x1, 0x0, 0x2, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f00000004c0)) 16:36:56 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0xfff6, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xc1) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x41) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x2) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f00000001c0)='./file2\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=r1, @ANYBLOB="332f660015b453af86d707ab2be457dcf50a467e07adda6876ba70af614baa546d52862c586bd3477d646fd84ebe057c135a76d8d28e35332ba08a84358a8557dfa643c379fb81ab3bf349b7f503c10bcfe862c88b9c9a6363b5119f32d1708bbef1"]) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0x0, r1, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x7180, &(0x7f0000001340)={0x0, 0x0, 0x1, 0x40000000, 0xfffffffc}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001180), &(0x7f0000000300)) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./fi']) pipe2$9p(&(0x7f0000000140), 0x6000) setreuid(0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000340), 0x2040, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 16:36:56 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x28, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0xe14, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) 16:36:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x35880}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000000000000052e", @ANYRES32, @ANYBLOB="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"/438], 0x18}, 0x0) r2 = dup(r1) io_uring_enter(0xffffffffffffffff, 0x186e, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0xbe7, 0x4) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:36:56 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) r3 = dup2(r1, r1) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, r1], 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x39, 0x1, 0x8}}) getpgid(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x8, 0x2) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) 16:36:56 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, r1+60000000}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{r2, r3+60000000}}, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1a3ec2bfed25ad67}, 0x80000001) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 2017.225428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.237789] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 2017.238892] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 2017.240072] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 2017.240929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:56 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 16:36:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) [ 2017.305961] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 16:36:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/223, 0xdf, 0x3) 16:36:56 executing program 7: fallocate(0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x4, 0xc1, 0xb4700000, 0x3ff, 0x73cf}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, r1+60000000}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x80, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{r2, r3+60000000}}, &(0x7f0000000280)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x1a3ec2bfed25ad67}, 0x80000001) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 16:36:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 16:36:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x3) [ 2017.459584] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 16:36:56 executing program 3: syz_io_uring_setup(0x4af8, &(0x7f0000000280), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb) 16:36:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 16:36:56 executing program 2: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) fchdir(r0) [ 2017.554555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.563138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.639269] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 16:36:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x35880}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000000000000052e", @ANYRES32, @ANYBLOB="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"/438], 0x18}, 0x0) r2 = dup(r1) io_uring_enter(0xffffffffffffffff, 0x186e, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0, 0x7fdfffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000200)=0xbe7, 0x4) recvmmsg(r2, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x500, 0x20000022, 0x0) 16:36:56 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x10400, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000300)=0x3f, 0x4) read$ptp(0xffffffffffffffff, &(0x7f0000000380)=""/154, 0x9a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x106000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x0, 0x3, 0x0, 0x2, 0x6, 0x0, 0x37, 0x38, 0xdd, 0x0, 0x3, 0x20, 0x1, 0x0, 0x0, 0x7}, [{0x6, 0x32, 0x3, 0x0, 0xc42, 0x0, 0x400}], '\r', ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x759) read$hiddev(r1, &(0x7f0000000f40)=""/91, 0x5b) syz_open_dev$vcsn(&(0x7f0000000fc0), 0x1000, 0x541043) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x50, r3, 0x4, 0x70bd29, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008085}, 0x20000000) syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), r1) 16:36:56 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x5418, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100000001, 0x960f) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaa5ceb0086dd6096153f00082c0020010078000000000000000000000000ff0200000000000000000000000000011e3c0c94f18d000000a9d3b75e1509000000e25de3ff3c82a62676d001ff205fc6de9848ce6afa1d804c3baeb17312f47b4516dab98468edcecd36bd029cb4e16a27ddece5dd7eccfe96040071dedc9c9d5ba6c87b120300000000000020c2a569b689aa23d757b7b42803010000009b542364a5abcb411444f636259dd752ed823a3b6cb04eeae71035a8446ef221d39d3504136905c2a58700000000000020ae67b64fea2e305f45ed9c0102c04c8556bf719cb84ff6184a3628d3f783650e140ce6b1c3d2a80c0a55f178d30fd2907bf084450fa09588266ba4c2d00be25c040bb1cb5236c54acc82a88e698ea98a3b06b9c46f41466300000000000000"], 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x5418, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x0, 0x1) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) syz_emit_ethernet(0x1022, &(0x7f0000000280)=ANY=[@ANYBLOB="d8f1bba09a36dc8b850935a0a4439e7b0d9faf39932a9ff3c2598d8b36c30819023a45fa213eabc618b0aeee23577a164beab648c7e42a751cdcad6d494dd7cf5a049f3dfa5a6e5f0d892f6615a6dd78294ae91ba07ae6ed18c33f811e8d8f1ba0f54856d0732e4725c5c395eac8646ac896016e9e36a93c325a8b005c1cb83b29c91d57"], &(0x7f0000000080)={0x1, 0x4, [0xa00, 0x813, 0xb05, 0x83e]}) sendfile(r2, r3, &(0x7f0000000680)=0x7ff, 0x9) r4 = fork() ptrace$setopts(0x4206, r4, 0x10001, 0x3d) r5 = fork() wait4(0x0, &(0x7f0000000100), 0x2, &(0x7f00000001c0)) ptrace$setopts(0x4206, 0x0, 0x0, 0x100021) ptrace(0x10, r5) wait4(0xffffffffffffffff, 0x0, 0x1, 0x0) 16:36:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x60}, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:56 executing program 3: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) lseek(r4, 0xfffffffffffff86c, 0x3) 16:36:56 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) 16:36:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_destroy(r0) 16:36:56 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\a', 0x0) fsetxattr$security_capability(r0, &(0x7f0000000180), &(0x7f0000000340)=@v3, 0x18, 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) [ 2017.718727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.733279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.779403] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 16:36:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) fadvise64(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x7, 0x80, 0x0, 0x9, 0x6f, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x93a, 0x4, @perf_bp={0x0, 0x1c}, 0x9008, 0x0, 0x8, 0x5, 0x0, 0x5, 0x0, 0x0, 0x51}, 0x0, 0x9, r0, 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r1, r2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 2018.050342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:57 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 16:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x3}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:57 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000900)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000000140)={0x0, 0x0, 0x8, 0x1, 0x0, r0, 0x0}]) 16:36:57 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) sync() 16:36:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_destroy(r0) 16:36:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:36:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) ftruncate(r1, 0x91) 16:36:57 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) [ 2018.118646] kauditd_printk_skb: 204 callbacks suppressed [ 2018.118654] audit: type=1401 audit(1752943017.270:5963): op=setxattr invalid_context="" 16:36:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_destroy(r0) [ 2018.230838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.248456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:57 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 16:36:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) ftruncate(r1, 0x91) 16:36:57 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 16:36:57 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 16:36:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:36:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_destroy(r0) 16:36:57 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x56dd, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2018.435977] audit: type=1401 audit(1752943017.588:5964): op=setxattr invalid_context="" [ 2018.570300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:57 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 16:36:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) ftruncate(r1, 0x91) 16:36:57 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 16:36:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:36:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x6}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:57 executing program 7: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) 16:36:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) dup(r0) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1f, 0x2, 0x1f, 0x0, 0x0, 0x5e, 0x2a000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYRESOCT]) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000180), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) kexec_load(0x0, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000000, 0x8000000}], 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) gettid() 16:36:57 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x1) [ 2018.671774] audit: type=1401 audit(1752943017.824:5965): op=setxattr invalid_context="" 16:36:57 executing program 1: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r0) 16:36:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x100018d7, 0x10, 0x1, 0x376}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000000000), &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100e50018000000a7accb3734e18c13a8d0360fd960ffffac0301b5958a82b8535e9bb7bc6506346d7d1b9bbe1c92c9f2272fe54263447843b678a70460ff4ee824aefd99b8e1cdbb490000e203ace21f2041a873df58a24c083f98733c3911eca5644d98688bd63b", @ANYRES32=r0, @ANYRES64]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="30c85d8239183b718f9bf600000000000080487fec864b245e0f3f9be149f80000000000000000009e2340d659b691d89df1a3a6d4755ca618951aa113930a432e2efa00"/78], 0x30}}, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000280), &(0x7f0000000300)=@sha1={0x1, "9f8ce3fd5eba33278ce4ec989be7aeef64c50e03"}, 0x15, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) 16:36:57 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) ftruncate(r1, 0x91) 16:36:57 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 2018.779062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.791228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.863437] audit: type=1401 audit(1752943018.015:5966): op=setxattr invalid_context="" 16:36:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x22}, 0x0, 0x0, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2019.098971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x50}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000140)=';', 0x1) 16:36:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0xa, 0x0, &(0x7f0000000180)) 16:36:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:36:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x45f4, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 16:36:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/cpuset.cpus\x00', 0x42, 0x0) write$P9_RWALK(r0, 0x0, 0x0) 16:36:58 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') syz_io_uring_setup(0x5de6, &(0x7f0000000040)={0x0, 0x0, 0x6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a7, 0x20000, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x0, 0x7}, 0x10000, 0x2, 0x7, 0x0, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r0 = syz_io_uring_complete(0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000900)='\x00\xdfn\x04\x02oA\x13\xe0\xac\xb6\xee\xa1\x0e\xb0&0\xfc.iOw\xe3\xbb\x01\xb7D \x05\xf9\x05\x8c\xed\x16D\v\xa8c|)\xea\x1b%\xbd1D\xb6\x8e9\xa6|\x06B-\x905\x111!5\xaf\xddf\xf8\xd2b\x16\xec\xf8<\xd9\xbc\xf7-F\x80\x8a\xe9D|n*\x9fM\x1e\x80\xf02\x89^\x92\x1fY\xcbcN\xf1\x06\xe9\xdfy&\xbaX\x03\xbeD\xb6\xe2\xa4\x12v\xc4=?f\xf1g@l17\xbb\xc9\xc51\x83@M\x13\xa6\xe84\xb2\xe74*+\xc1\xab\x15G\xef<\a\x8d\x00zf\x88\xe5\x9d\\\xc8\xf9\xb3', &(0x7f00000009c0)='\x00\x1d\xb2O\x8b\x1b\x83\x1e\n\x13\x00\x00\xd9\xd0\x1c\x1cY\x8d\xca\xc6\f\x95\xdej_\x95_\xfc>;\x1fh\xb3\x91{9[\xc0\xc66\x9e\xb9\a\xcb\x06\xa0\xd7\xefvR\x85/\x05$\xecx\x8a\x9b\xc29\x8fc\\\xab8!\xe2\x03$z-U\xbcx\xea \xcb\x16\\\x1b\xe7U\xde\x88\xda\xad\xcfZ9`\x86\x18\xb8\xb7\xd2\xa2\xf0\xc0\x93L\xac7\x85\xc2jg^\xfe>eA<\xac\xe1\xd34Df\x02L:\x14WI\x10\xffe}J\xe3Y\xe5\xaf\xde\x9f\xcf\xfb\xa2'], &(0x7f0000000380)=[&(0x7f0000000300)='vfat\x00', &(0x7f00000006c0)='\xa5\x19\xa3\x15\xe4fB|\x8e\xa6V\x8d[(\xb7\xa4\x06~\x01-Wl\xb2\x84Ax\xfb7W\x89\xd3[I\xc8\x8c%0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000280)) 16:36:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)={0x78, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@generic="3d5f7d378ba90a1f5a735bd5c653114e208d22f3b3a875e4e8f9390b58fc67e25ce5568fb1e95621ae7e96582dc47fb060e73321ec4f287a69a8136b30a4eef6a861ab1736256e72b0a12fd92d4dc00263bc742628", @typed={0xc, 0x11, 0x0, 0x0, @u64=0xffffffffffffffff}]}, 0xa9}}, 0x20000000) close_range(r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0xff, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x400082, 0x151) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x4, 0x6}, {0x4, 0xffff}]}) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) ioctl$KIOCSOUND(r6, 0x4b2f, 0xff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000500)=0x7) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x870}, 0x240049c1) unshare(0x48020200) [ 2019.233091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2019.246416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000600)="a1", 0x1, 0x0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="99f4d2ba862e9a40d67948108bffbdce567156c838a21a2ea8e3a1f7db0a955a0ee7b532d85ea4d684bf95ec750c07685f065452387b5ab44df7c24d00f13ded307ff11993667c4e0ad5156418db5fb98de5593c5aa8d5f410a318e3c648e047279f0894d7aaac626f4ae7d6c939fbda927080883265ec9918e4880e21d268486f7d7e28ab6016edc9e5529b26e2bc30", 0x90}, {&(0x7f0000000240)="28ff2aedd701e067b224f0520c42c610c47a937da084d3b73b871f0fad5bf303a0e1195ac5e755a6556139f0cb2c461c", 0x30}], 0x2}, 0x0) 16:36:58 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 2019.304426] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.7'. 16:36:58 executing program 6: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) 16:36:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x300) sync_file_range(0xffffffffffffffff, 0x82, 0x5, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002ec0), 0x2001, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0x7) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x0) 16:36:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f0000000080)) 16:36:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000280)) [ 2019.556002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) [ 2019.571187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x58}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:58 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:58 executing program 6: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:58 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:58 executing program 7: syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4200210}, 0xc, 0x0}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) 16:36:58 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='shortname=lower']) 16:36:58 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 2019.785933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2019.801436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000280)) 16:36:59 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:59 executing program 0: r0 = gettid() fstatfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0xfffffffc, &(0x7f0000000140)={0xc, 0x0, 0x893}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000001300)=""/58, &(0x7f0000001540)=0x3a) r5 = socket$inet6_udp(0xa, 0x2, 0x0) kcmp(r3, 0x0, 0x3, r4, r5) ioctl$SG_IO(r2, 0x2284, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000180)=0x18) 16:36:59 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x65}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:36:59 executing program 7: open$dir(0x0, 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001d0680", @ANYRES32=0xffffffffffffffff]) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x4bd, 0x0, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 16:36:59 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:36:59 executing program 6: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) [ 2020.313462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1", 0x1}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4040000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000280)) [ 2020.346287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:36:59 executing program 2: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:59 executing program 6: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:59 executing program 5: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) r1 = semget(0x1, 0x4, 0x20c) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/99) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x1ff}, {0x0, 0x6}], 0x2) r2 = semget$private(0x0, 0x2, 0x693) semop(r2, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x51, 0x1f, 0x3, 0x40, 0x0, 0x10001, 0x45000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffff96, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0xa02, 0x2bb4fb7a, 0x80000, 0x2, 0xffffffffffffffff, 0x80000001, 0x100, 0x0, 0x7, 0x0, 0x20b}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) r3 = semget$private(0x0, 0x0, 0x10) semtimedop(r3, &(0x7f0000000040)=[{0x3, 0x400, 0x2800}, {0x0, 0x3, 0x1800}, {0x1, 0x8, 0x1000}, {0x4, 0x6, 0x1000}, {0x0, 0x1, 0x800}, {0x0, 0x1ff, 0x800}, {0x2, 0x8b1b, 0x1800}], 0x7, &(0x7f0000000280)={0x0, 0x3938700}) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 16:36:59 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:36:59 executing program 7: open$dir(0x0, 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001d0680", @ANYRES32=0xffffffffffffffff]) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x4bd, 0x0, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 16:36:59 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:36:59 executing program 7: open$dir(0x0, 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001d0680", @ANYRES32=0xffffffffffffffff]) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x4bd, 0x0, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 16:36:59 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 16:36:59 executing program 7: open$dir(0x0, 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001d0680", @ANYRES32=0xffffffffffffffff]) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x4bd, 0x0, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 16:36:59 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:36:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x3}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:00 executing program 6: r0 = open(&(0x7f0000000140)='./file1\x00', 0x101000, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = inotify_init1(0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x427, r2, &(0x7f0000000080), 0x0, 0x100000000}, &(0x7f0000000180)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x0, 0x2, 0x5, 0x101, 0x10, @private1, @private2, 0x20, 0x0, 0x61, 0x6}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2020.951895] Module has invalid ELF structures [ 2021.001388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2021.025429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2021.350635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x4}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:00 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:37:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:00 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:37:00 executing program 2: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:37:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:00 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:00 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 2021.466847] Module has invalid ELF structures [ 2021.479416] Module has invalid ELF structures 16:37:00 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:00 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) [ 2021.710154] Module has invalid ELF structures [ 2021.765716] Module has invalid ELF structures [ 2021.816782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.126185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2026.620584] Bluetooth: hci4: command 0x0409 tx timeout [ 2028.668585] Bluetooth: hci4: command 0x041b tx timeout [ 2030.716711] Bluetooth: hci4: command 0x040f tx timeout [ 2031.350729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2031.353128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.390772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2031.407436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2031.409318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2031.411949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2031.596948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2031.608355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2031.916133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2031.924676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:11 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:11 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:37:11 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:11 executing program 2: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 16:37:11 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 16:37:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x5}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:11 executing program 1: syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x3f, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000340), 0x1000) bind(0xffffffffffffffff, &(0x7f00000002c0)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) [ 2032.025670] Module has invalid ELF structures [ 2032.086360] Module has invalid ELF structures 16:37:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:11 executing program 2: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 2032.533448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:11 executing program 3: ftruncate(0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0x400, &(0x7f0000000980)) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x19, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) fsmount(r0, 0x0, 0x8a) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x400, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x1ff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x1, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 2032.764731] Bluetooth: hci4: command 0x0419 tx timeout 16:37:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x6}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 2033.082258] Module has invalid ELF structures [ 2033.084380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) [ 2033.106400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) 16:37:12 executing program 1: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x3}, 0x12108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 16:37:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:12 executing program 6: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) 16:37:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) [ 2033.391100] Module has invalid ELF structures [ 2033.439464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:12 executing program 6: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) 16:37:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x7}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:12 executing program 1: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x3}, 0x12108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 16:37:12 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) [ 2033.594816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.613285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.934328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2033.939764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:13 executing program 6: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) 16:37:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x53}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) 16:37:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r3, 0x7ff) finit_module(r3, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r3, 0x406, r0) 16:37:13 executing program 1: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x3}, 0x12108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 16:37:13 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup2(r2, r1) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @mcast2, 0x3f}, 0x1c) r4 = accept4$packet(r3, 0x0, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r4, 0xc0109428, &(0x7f0000000200)={0x3, 0x1}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) [ 2034.065445] Module has invalid ELF structures 16:37:13 executing program 6: r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) [ 2034.123180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:13 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) [ 2034.157805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:13 executing program 1: getxattr(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x6, @loopback}, 0x1c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x3}, 0x12108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000300)=0x2, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x2c00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'dummy0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 16:37:13 executing program 6: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b34, 0x0) 16:37:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@updsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}}}, @algo_auth={0x48, 0x1, {{'sha256-ce\x00'}}}]}, 0x184}}, 0x0) 16:37:13 executing program 3: prlimit64(0x0, 0x6, &(0x7f0000000080), 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000002780)='./file0/file0\x00', 0x0, 0x0, 0x0) 16:37:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:13 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, 0x0}, 0x2) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 2034.485246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, 0x8) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24000010) io_uring_setup(0x259b, &(0x7f0000000200)={0x0, 0x759, 0x20, 0x200, 0x372}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000280)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 16:37:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x65}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 16:37:13 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xc3}, {0x6}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x4}, 0x14}}, 0x0) 16:37:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)) pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x0) 16:37:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0x2, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'veth0_virt_wifi', 0x32, 0x35}, 0x12) socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/i2c_i801', 0x82c0, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) [ 2034.676428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2034.695813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:13 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}], 0x0, &(0x7f0000000140)=ANY=[]) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) 16:37:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r1) write$binfmt_elf64(r3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000880)=""/136, 0x88}, {&(0x7f0000000280)=""/20, 0x14}], 0x3, 0x0, 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r1, r4, 0xffffffffffffffff, r5, r1], 0x7) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x39, 0x1, 0x8}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) 16:37:13 executing program 0: r0 = syz_io_uring_setup(0x498b, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0xc6da2cc48daca113}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a30bca46c9668264c0d7196ece8951191be69b2540a117dff288ba9b040a4b0d27e312363e56576fc031bec29a035bcfff3cdfb4ae14638b9a11edbbce402d51f401f4e91583088d074e39e2113eef2854ea62827916883758f7036eeaddd76ef2f6a43bc213957188b74b9cc54db25438704026e79707de44acd358c0766be1d214e"], 0xf3) io_uring_enter(r0, 0x7643, 0x0, 0x0, 0x0, 0x0) 16:37:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040002", 0x1d, 0x1500}, {0x0}, {0x0}, {0x0}], 0x0, &(0x7f0000012800)) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) 16:37:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@empty}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 16:37:13 executing program 5: r0 = fsopen(&(0x7f00000002c0)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 16:37:14 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 2035.003932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x56}], 0x1) 16:37:14 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 3: r0 = syz_io_uring_setup(0x12a8, &(0x7f0000000240), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 16:37:14 executing program 7: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) connect$inet6(r0, &(0x7f0000000540)={0x2, 0x0, 0x0, @dev}, 0x1c) 16:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x65}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 16:37:14 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004034, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}]}) [ 2035.148104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.164422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.174975] EXT4-fs (sda): re-mounted. Opts: inode_readahead_blks=0x0000000000000800,,errors=continue 16:37:14 executing program 7: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='/\x00', 0x0) 16:37:14 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0xffffffffffffffff) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_free(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x3, r0) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x80) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = pkey_alloc(0x0, 0x97e6cd79c2f09746) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r3) 16:37:14 executing program 0: setregid(0xffffffffffffffff, 0xee01) r0 = getegid() stat(&(0x7f0000000580)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setgid(r0) 16:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0xb0, 0x11, 0xc21, 0x0, 0x0, {}, [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0x8d, 0x0, 0x0, 0x0, @binary="a76931d701cd94a41bb2b6de4e824a334fae579ac26fe3a3804aab4a4d5194e9943be3294c44e8ea09d423d986d1eb6a60ba9602325f065a6617151beb4fa4300f54b3e210db5e9ef82dab312f107a997a2fcd7982a9240b64e87b0145e8a24ef550be70f6d600b005245ac9d82df728fe35fc298c28037ab28ac530cdc95c0fe737c2237dacf80f71"}]}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffffff}]}, 0xb0}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c00210c0000000000080000000000003f88a95c000d000014000100fc020010000000000000000000001000f177595fb426166c31833ead6d361a849c9178b2242c415c8c77360e1d3411ced6311c91b24b9a9a0481ace3b4760e9bb097b0d6074ba5805fc92a0a8323b107a4e842d6ca4672dfe8e29fce3661162b197743b0383f3c86b7ded88e1740000000000000006a13cb72d4205b3169c3fba88788"], 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002700)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="a6b764c4cdee5a18994e709d0d40"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x40488c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000007010100000000000000000100000a0900010073797a31000000000900010073797a30000000000900010073797a3100000000360007800800014000000000f4b1078008020240000000070800022a00010000080027656efc57aa01500000000200"/118], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r4 = fork() fork() move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) move_pages(r4, 0x6, &(0x7f0000000200)=[&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) 16:37:14 executing program 3: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) getgroups(0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r0}}]}) 16:37:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 16:37:14 executing program 7: unshare(0x2a040600) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) [ 2035.429553] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2035.433047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=844696 comm=syz-executor.5 [ 2035.440831] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 2035.440831] [ 2035.474982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.482075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.482654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:14 executing program 7: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, &(0x7f0000000100)) 16:37:14 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000009c0)={0x0, 0x0}) setpgid(0x0, r1) r2 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000c00), 0x1312) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00^\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64, @ANYRES64=r2, @ANYBLOB="0006000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xfdef) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl(r4, 0x0, &(0x7f0000000180)="1895e82321d6267afc5441d2ef05c31a773c7a49ca2aad524f3a098fd8252482e5e3683e9eac81bd943ccda92f687eec2625e2d33dc401e6907f9be3f303497fb20ba9c06462256355abad14dce245beb24561d4e9d7e90964aedb10014b6dd0e29a8c4fdf3223b79e3114705963fbe431a2a03fc219bfbb0b5cea730c13c5e7581324e76e8b7c2ee4fcbaa8b450900daae57a2395a0daff35ed3cdb71f30b42d5186044da0ee1fac8100a71e45ef307011a") ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x4a16, &(0x7f0000000240)={0x0, 0x229d, 0x2, 0x1, 0x3c7, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000feb000/0x12000)=nil, &(0x7f0000000300), &(0x7f0000000340)) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) 16:37:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 16:37:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:14 executing program 2: shutdown(0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) 16:37:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0xb0, 0x11, 0xc21, 0x0, 0x0, {}, [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0x8d, 0x0, 0x0, 0x0, @binary="a76931d701cd94a41bb2b6de4e824a334fae579ac26fe3a3804aab4a4d5194e9943be3294c44e8ea09d423d986d1eb6a60ba9602325f065a6617151beb4fa4300f54b3e210db5e9ef82dab312f107a997a2fcd7982a9240b64e87b0145e8a24ef550be70f6d600b005245ac9d82df728fe35fc298c28037ab28ac530cdc95c0fe737c2237dacf80f71"}]}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffffff}]}, 0xb0}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c00210c0000000000080000000000003f88a95c000d000014000100fc020010000000000000000000001000f177595fb426166c31833ead6d361a849c9178b2242c415c8c77360e1d3411ced6311c91b24b9a9a0481ace3b4760e9bb097b0d6074ba5805fc92a0a8323b107a4e842d6ca4672dfe8e29fce3661162b197743b0383f3c86b7ded88e1740000000000000006a13cb72d4205b3169c3fba88788"], 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002700)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="a6b764c4cdee5a18994e709d0d40"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x40488c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000007010100000000000000000100000a0900010073797a31000000000900010073797a30000000000900010073797a3100000000360007800800014000000000f4b1078008020240000000070800022a00010000080027656efc57aa01500000000200"/118], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r4 = fork() fork() move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) move_pages(r4, 0x6, &(0x7f0000000200)=[&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) 16:37:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x3c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x20, 0xc, 0x0, 0x0, @str='/proc/sys/net/ipv4/tcp_rmem\x00'}]}, 0x3c}}, 0x0) [ 2035.659908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:14 executing program 6: pselect6(0x40, &(0x7f0000001000), 0x0, &(0x7f0000001080)={0x6}, &(0x7f00000010c0), &(0x7f0000001140)={&(0x7f0000001100)={[0x4]}, 0x8}) [ 2035.675039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.691024] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2035.695349] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 2035.696442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=845102 comm=syz-executor.5 16:37:14 executing program 6: r0 = syz_io_uring_setup(0x1c08, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2035.748436] audit: type=1326 audit(1752943034.900:5967): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=845183 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa76742cb19 code=0x0 16:37:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 16:37:14 executing program 7: openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x1fe) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x3000000a}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x52, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/116, 0x74}], 0x1) fcntl$setlease(r0, 0x400, 0x0) 16:37:14 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mount$cgroup(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x20, 0x0) 16:37:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:37:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xb, 0x28, 0x0, 0x0, @str='TIPCv2\x00'}]}]}, 0x2c}}, 0x0) 16:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0xb0, 0x11, 0xc21, 0x0, 0x0, {}, [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0x8d, 0x0, 0x0, 0x0, @binary="a76931d701cd94a41bb2b6de4e824a334fae579ac26fe3a3804aab4a4d5194e9943be3294c44e8ea09d423d986d1eb6a60ba9602325f065a6617151beb4fa4300f54b3e210db5e9ef82dab312f107a997a2fcd7982a9240b64e87b0145e8a24ef550be70f6d600b005245ac9d82df728fe35fc298c28037ab28ac530cdc95c0fe737c2237dacf80f71"}]}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffffff}]}, 0xb0}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c00210c0000000000080000000000003f88a95c000d000014000100fc020010000000000000000000001000f177595fb426166c31833ead6d361a849c9178b2242c415c8c77360e1d3411ced6311c91b24b9a9a0481ace3b4760e9bb097b0d6074ba5805fc92a0a8323b107a4e842d6ca4672dfe8e29fce3661162b197743b0383f3c86b7ded88e1740000000000000006a13cb72d4205b3169c3fba88788"], 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002700)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="a6b764c4cdee5a18994e709d0d40"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x40488c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000007010100000000000000000100000a0900010073797a31000000000900010073797a30000000000900010073797a3100000000360007800800014000000000f4b1078008020240000000070800022a00010000080027656efc57aa01500000000200"/118], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r4 = fork() fork() move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) move_pages(r4, 0x6, &(0x7f0000000200)=[&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) [ 2035.956868] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2035.960643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=845601 comm=syz-executor.5 [ 2035.962321] netlink: 'syz-executor.0': attribute type 40 has an invalid length. [ 2035.980631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.989644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0xb0, 0x11, 0xc21, 0x0, 0x0, {}, [@nested={0x94, 0x0, 0x0, 0x1, [@typed={0x8d, 0x0, 0x0, 0x0, @binary="a76931d701cd94a41bb2b6de4e824a334fae579ac26fe3a3804aab4a4d5194e9943be3294c44e8ea09d423d986d1eb6a60ba9602325f065a6617151beb4fa4300f54b3e210db5e9ef82dab312f107a997a2fcd7982a9240b64e87b0145e8a24ef550be70f6d600b005245ac9d82df728fe35fc298c28037ab28ac530cdc95c0fe737c2237dacf80f71"}]}, @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffffff}]}, 0xb0}}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001c00210c0000000000080000000000003f88a95c000d000014000100fc020010000000000000000000001000f177595fb426166c31833ead6d361a849c9178b2242c415c8c77360e1d3411ced6311c91b24b9a9a0481ace3b4760e9bb097b0d6074ba5805fc92a0a8323b107a4e842d6ca4672dfe8e29fce3661162b197743b0383f3c86b7ded88e1740000000000000006a13cb72d4205b3169c3fba88788"], 0x30}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002700)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="a6b764c4cdee5a18994e709d0d40"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x40488c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000002640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000000007010100000000000000000100000a0900010073797a31000000000900010073797a30000000000900010073797a3100000000360007800800014000000000f4b1078008020240000000070800022a00010000080027656efc57aa01500000000200"/118], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r4 = fork() fork() move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) move_pages(r4, 0x6, &(0x7f0000000200)=[&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) r6 = fork() move_pages(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) 16:37:15 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x29, 0x0, &(0x7f0000000040)=0x28) 16:37:15 executing program 0: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x5e033, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x2132, 0xffffffffffffffff, 0x0) 16:37:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x2}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0x409, &(0x7f0000000000)) 16:37:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r0, &(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80) 16:37:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 16:37:15 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 2036.713042] ------------[ cut here ]------------ [ 2036.714514] WARNING: CPU: 0 PID: 845716 at include/linux/fs.h:525 hugetlb_split+0x320/0xc50 [ 2036.716684] Modules linked in: [ 2036.717583] CPU: 0 PID: 845716 Comm: syz-executor.0 Not tainted 5.10.240 #1 [ 2036.719408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.721526] RIP: 0010:hugetlb_split+0x320/0xc50 [ 2036.722652] Code: 00 00 31 f6 48 81 c7 e0 00 00 00 e8 0a de 7c 02 31 ff 41 89 c6 89 c6 e8 be d8 d5 ff 45 85 f6 0f 85 5e fe ff ff e8 60 df d5 ff <0f> 0b e9 52 fe ff ff e8 54 df d5 ff 48 8d 43 50 48 89 c2 48 89 44 [ 2036.726926] RSP: 0018:ffff888049e079a8 EFLAGS: 00010216 [ 2036.728175] RAX: 0000000000000115 RBX: ffff8880373a3000 RCX: ffffc900013e5000 [ 2036.729830] RDX: 0000000000040000 RSI: ffffffff816aeed0 RDI: 0000000000000005 [ 2036.737040] RBP: 0000000020400000 R08: 0000000000000000 R09: ffff88800ce400bf [ 2036.739306] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff110093c0f3e [ 2036.741355] R13: ffffffff8567a47c R14: 0000000000000000 R15: 0000000000000001 [ 2036.743347] FS: 00007f6c40d6f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2036.745635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2036.747351] CR2: 00007f6c43909000 CR3: 00000000393ea000 CR4: 0000000000350ef0 [ 2036.749412] DR0: 0000000100000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2036.751405] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000ddd106aa [ 2036.753483] Call Trace: [ 2036.754324] ? follow_hugetlb_page+0x10c0/0x10c0 [ 2036.755617] ? vm_area_alloc+0x110/0x110 [ 2036.756937] __vma_adjust+0xbe8/0x2510 [ 2036.758124] ? anon_vma_clone+0x3d0/0x590 [ 2036.759431] __split_vma+0x41a/0x4e0 [ 2036.760598] __do_munmap+0xfae/0x1260 [ 2036.761821] ? arch_get_unmapped_area+0x450/0x450 16:37:15 executing program 3: getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x67, 0x3, 0x0) r3 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xe0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x464741, 0xd3}, 0x18) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="bc", 0xffffffffffffff1c}], 0x1, 0x0, 0xfffffffa, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000380)) finit_module(r4, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000580)={0x1, 0x7f, 0x10000}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) setresuid(r0, r1, 0x0) [ 2036.763294] ? lock_release+0x680/0x680 [ 2036.764660] mmap_region+0x7c8/0x1500 [ 2036.765878] do_mmap+0xcdb/0x11e0 [ 2036.766942] vm_mmap_pgoff+0x198/0x1f0 [ 2036.768198] ? randomize_page+0xb0/0xb0 [ 2036.769388] ksys_mmap_pgoff+0xde/0x560 [ 2036.770625] ? find_mergeable_anon_vma+0x250/0x250 [ 2036.772063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.773498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.775021] do_syscall_64+0x33/0x40 [ 2036.776205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.777655] RIP: 0033:0x7f6c437f9b19 [ 2036.778836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.783682] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2036.785862] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 2036.787902] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 2036.789911] RBP: 00007f6c43853f6d R08: ffffffffffffffff R09: 0000000000000000 [ 2036.791940] R10: 0000000000002132 R11: 0000000000000246 R12: 0000000000000000 [ 2036.793942] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 [ 2036.796005] irq event stamp: 759 [ 2036.797123] hardirqs last enabled at (771): [] console_unlock+0x92d/0xb40 [ 2036.799469] hardirqs last disabled at (782): [] console_unlock+0x839/0xb40 [ 2036.801867] softirqs last enabled at (210): [] asm_call_irq_on_stack+0x12/0x20 [ 2036.804492] softirqs last disabled at (145): [] asm_call_irq_on_stack+0x12/0x20 [ 2036.806992] ---[ end trace 117630d11d9891ec ]--- [ 2036.808649] ------------[ cut here ]------------ [ 2036.810048] WARNING: CPU: 0 PID: 845716 at include/linux/fs.h:525 hugetlb_split+0x320/0xc50 [ 2036.812417] Modules linked in: [ 2036.813419] CPU: 0 PID: 845716 Comm: syz-executor.0 Tainted: G W 5.10.240 #1 [ 2036.815766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2036.818054] RIP: 0010:hugetlb_split+0x320/0xc50 [ 2036.819461] Code: 00 00 31 f6 48 81 c7 e0 00 00 00 e8 0a de 7c 02 31 ff 41 89 c6 89 c6 e8 be d8 d5 ff 45 85 f6 0f 85 5e fe ff ff e8 60 df d5 ff <0f> 0b e9 52 fe ff ff e8 54 df d5 ff 48 8d 43 50 48 89 c2 48 89 44 [ 2036.824296] RSP: 0018:ffff888049e079a8 EFLAGS: 00010212 [ 2036.825920] RAX: 000000000001a30f RBX: ffff8880373a3000 RCX: ffffc900013e5000 [ 2036.827910] RDX: 0000000000040000 RSI: ffffffff816aeed0 RDI: 0000000000000005 [ 2036.829951] RBP: 0000000020800000 R08: 0000000000000000 R09: ffff88800ce400bf [ 2036.831911] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff110093c0f3e [ 2036.833949] R13: ffffffff8567a47c R14: 0000000000000000 R15: 0000000000000001 [ 2036.836028] FS: 00007f6c40d6f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2036.838255] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2036.839942] CR2: 00007f6c43909000 CR3: 00000000393ea000 CR4: 0000000000350ef0 [ 2036.841921] DR0: 0000000100000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2036.843974] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000ddd106aa [ 2036.845826] Call Trace: [ 2036.846671] ? follow_hugetlb_page+0x10c0/0x10c0 [ 2036.847939] ? vm_area_alloc+0x110/0x110 [ 2036.848964] __vma_adjust+0xbf3/0x2510 [ 2036.850023] ? anon_vma_clone+0x3d0/0x590 [ 2036.851144] __split_vma+0x41a/0x4e0 [ 2036.852235] __do_munmap+0xfae/0x1260 [ 2036.853246] ? arch_get_unmapped_area+0x450/0x450 [ 2036.854361] ? lock_release+0x680/0x680 [ 2036.855299] mmap_region+0x7c8/0x1500 [ 2036.856249] do_mmap+0xcdb/0x11e0 [ 2036.857078] vm_mmap_pgoff+0x198/0x1f0 [ 2036.857998] ? randomize_page+0xb0/0xb0 [ 2036.858940] ksys_mmap_pgoff+0xde/0x560 [ 2036.859875] ? find_mergeable_anon_vma+0x250/0x250 [ 2036.861020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2036.862263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2036.863464] do_syscall_64+0x33/0x40 [ 2036.864358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2036.865646] RIP: 0033:0x7f6c437f9b19 [ 2036.866675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2036.871063] RSP: 002b:00007f6c40d6f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2036.873103] RAX: ffffffffffffffda RBX: 00007f6c4390cf60 RCX: 00007f6c437f9b19 [ 2036.874898] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 2036.876789] RBP: 00007f6c43853f6d R08: ffffffffffffffff R09: 0000000000000000 [ 2036.878639] R10: 0000000000002132 R11: 0000000000000246 R12: 0000000000000000 [ 2036.880424] R13: 00007ffd71643d2f R14: 00007f6c40d6f300 R15: 0000000000022000 [ 2036.882321] irq event stamp: 1367 [ 2036.883280] hardirqs last enabled at (1379): [] console_unlock+0x92d/0xb40 [ 2036.885540] hardirqs last disabled at (1392): [] sysvec_apic_timer_interrupt+0xb/0xa0 [ 2036.887824] softirqs last enabled at (210): [] asm_call_irq_on_stack+0x12/0x20 [ 2036.890090] softirqs last disabled at (145): [] asm_call_irq_on_stack+0x12/0x20 [ 2036.892253] ---[ end trace 117630d11d9891ed ]--- 16:37:15 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x20040800, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x4}, 0x80) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) close(r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x42, 0x2, &(0x7f0000000940)="16c36377caf83e229c336618d2974e265f9ccf509ae2d8597210aba0ff3bc5b73426545715d6c302e818b80cf7201342c455d51af09106bf1d517ce0a31aa9d4f2761230899023db5782e80e417ca95dba6fa20ae4135f1e16af73bacb7ded03fbba57d62484c1762f3892955160ea305db582a2168dec7bca19f18f6b997679f01a541e389bb29d7388655c02b9fda263b77fc1756f82cb5644d316a7590e02318e1be2139e2960ebb33105e185302959cac336ea56d536eb6d6e250b8b293ae742caa84b7cc68a9015800226872ef24e871df4b951df216a8be94505f2a7667dc412ffd5b3c0a92fd3fc9df943bc14a55396c060b0ee23c102f297c82a5f089af07fd73822979c876afbd5b601389574374716121813234f1d6598b88e679e853e2e9dea1796d7ea300475367336ab39b2b96ac64fdf29d6f4342bcd3eefc1314b21f081e442b796ff8f3c1bb861c61bc6b549b079e18dbb0611e807b6022f1500f4eebaa5678db00596076b68b9df66840cb8c6254e3d771acf01a7b61a78aa0c13cb5e9e70d1772dbab474db920edcd8f9fba845e7ff5d1876d8ade7be56e7c4a137b2d3e3ceeab776689740acf76f5aa2758115efa41a9053838d0a7f3bd7e109db197bc07359bcdac68369134c6f6d4453bb853cfc7152030ae844e458f49b8272166918957e7a45cf4d6a1dd9602f5c9253bbd4cea90c650ca5a1bbd9a0eb94aec0b8107702b3636f758080edf21d2e897229830f39f48ad10c97a6d3e419247f107ab8fbe7a937bd0bd390e432d6de24a8b4ce2cd1c746bffe6717f79fb87aae36dc33803f7a2a8394816b959fe7d4ea9e39e94c322672e02fc65177897f3e8042ef9b7dc1211ee38056dd62cbe4518fd093ffda9e5ba69643301fed05bbdb218e8a2736552f27c621baf8dfce7f26035c655d8d22f30d5dcf1eaf8484ee08838bcb203f824527b755564478c58acf864b12f2f97d5d7241e68443a8b1c730c6fa428b1edcac25a4e4783bddf05a841f6906f78a8c4a4c4660fae30367c48c7def6e23af84d6ae06c3e6e7470f735cf7e299356ed95191ed295b6d4e687b116f317c1bbf81db114691d6ca14a363227e0496eefbe570d96efb9eba682fbdc6790638b41325baf7b1593a89f55b010dddd0f09c2286d1ee3dafb33a0ea944d6b4d8685efdffcd644002ba7bbd4b3678da5e25fff4823212f3aef48906861ebf0c0d35d671b62efb28e2685cc6afd19650985612eb9b27bad672e8f462a0fa823ca6676be90ba2d0dd0979db599fbe25a1716db3fd2b8a5bf504117b2a2aef70a7e89f1cf38cb130291631e4ca4a3a37b8fd6c59db45932e2f6e58855a79ba78892bb3a0a2ff1365dda99f63a92cbe7ff7eb497f0339abadcd5bfff0e5ea0325e3bed9d76fb847ffc121f308bfdb61bf34c2d66d80c8fbaf5bee823ccf0bb1ab0fcbc5671f2650ba282dd552dca90af1928420213550d45e9f511111a2f6ad3f3cfac50948b8bf375dd80eeb2ad5741081fe4335256528c4dff63d937e91dd742447e8851a9dcca03ba8cc8d9b3d05d6296fac37080965da09e1bd941ca8dfe438936e9c01a8e6a287732fe17b23b4a832369045106641ff08bf883c41dfd350a6cb5051fa95d3e4c6aa03cc26397f1f2af074933cb05161ce4420717b111a6c5c7da4eef378550eef7770a71b11ffda0ee1d2eb4f19fe925fef68a96e4989ba79a799ea1bfd6377ae854cba513fca49481d2a8d3efda5a9a80dc98c686408df0e82137fd5326072cf8754debe65100781481b67f962c6a4cfe0d0788dade3e44bffe215efc6efb304b233fa0259da37f622bdbfe57d9891a0ad717e04a4dad1ecd5103ffde1767943178cef01fc7acda942f150969305059857bb1152ef61f1ffef22f2bafc142f88c5dd84a2f1eed557bd7d575f6c2eb9c997151bf5164f7407a68a6bb8e31bac6cdfacd2387fcb5ee9cf816a817181549d262e971138e92daf6beaa46aca5ef25943497e9743edb121976773d8cb83109479e511756a0f33f7934f72930a14926489c0ddbcb28af5cb817d9970258a48bce300772d39d00be744b844a27d152774c84c2e5840dfd953d0ba848542b83aea9679ae5b4bc106f0b0881498e1ce82b322e9232c278aa9517c3511ab5f8e5677e0037f09aed6b8ef20650ff4ab93efbb01c49bc3c7e59ce1b858be5a83f41f225c378e73bcd26462aac260bff8e2763b40101babc224d2bc35551378a88f43d5420872d905215d8b82196008dd93c6278b607bedb3af96b4d65da2bab6ab701d0a02ac8f539dfea11d259c7daf2757e79feaf2c4ff08e1f928c7bfbc8d42bafd7ef14ec8e5be0759aed8ca2341a9df2dab11596d86496b2cf2a00f0a938f3de996d6c71075b811f9091c8210a46bbfb96006804f7a4138a3a4ca577cf8e41e74221edc869c97c3883a1e7e4157c711bcecc57c9be1e20241788ac8abe37d1de6fd048d0d2c9186a4a321b41958277ee4ed63a0e8db6becf76543c5c5ea429dc7d49365354693e727f56a2989016d7ecde7881e900888e59ac20cb428f33df2de23aa33e54c825f447ba274bbbefaa3a46e1788cd3e061b828d37015d65a28b8405cc7980b3a23254d0b52a46d91b5fca2a20c7d8ea0da3a6a7ea13c3ce8162a6f803ed28d198fa9596eb4d68aa69b022510504066a8b93215edd0a1a1641c804591eee979fd0f5b70a67c4a1320785d18a6ef24b43b367494afe6e5d28474137e8bd6448cf78495b4ee45b0b1ec21803c61b79b9ff4b0fcf76607cef3f5e3557cf7bfb979eef49de2d0f823b97a551fe20f5565b51fa80920aa4a0f0c3ac6437eb83d7b5850f916d2b1df49309d6d660307c9cd0fbddb21e0c17f97f9d69bbf7caffd90af80e637f47d7d6cfd97ca72787b14f17bf3c5f69a48fdb4e13492a62ce5fb558611370295306ae323e1ab2bb2b510273c525d52fffff28b673f8e43a1e1d73d48f45f6cb0ba2cfe22ce755ad6d29f9a00b5df3af8ae16089d42f9240cda92975aea3fcc40cb6debe56bd3d636b93c6b50e6d7ab2ee5446d05dc98c0d5adf79c1d8ceee3ee3bf9c03fd8c7d081574c9b0bb718d2a0c1ee06d3175dcc7dafd48f86da13eea63ab064bf0ee6ecd9763ab18f8652c1fb8f19f12b78fe0230672abcc56fdec2df413de2c169645d541c140fa9f80e971a6edcb107d51a2d0ef6fbe3c1a59532e6ad4c7e199a3d9104944f15efef03b840e3b27872246bf6d36f88c12880cd6bb3a8f289eeb5d231bfe4a4e534c30b107499e53cfb4f8f0c9466338ecae82c4998822d03215250616274afa973a6455e9b41bb192af5b01afbfb85f2e044cca7950b31880ddf2ddd29dbe054e3f7b3c5b0ed067b925caaf2940d35e4034f284e919b36b61f753fd79c8eb3a31fd933dbfd1c0dfd1fc499c600e9e7913386db2f555621005cb006efa24e2adb7c7f3507c75e51d01a6881082d58ef57c52eec55ddf3765b988903f06e7a1d532051147e6d4766fd5cd539566d1858c7cb0f3fac20b065a497c67b231290a791558ea1e4b0aff2df56dde9a9ff32f58dfcb9537f4d96a8efe1702232d3ee2bb01ef82a29e2dd932f029dbdac1cead8dc0d6474c8a696a47464a3b4a8588afb18c5d98db4d1cb77e67fc21b4f297f9e1ed43950fdf17ccd9ea7406f711be9cbf8ae72f14ce3e281394de7a5df199ffff7fa6ccd28106a8afba6886bb312b5b885a0cb66ad7904a33b6ea99eaa7d176c9fd5da3fb8433e59f4135ccf136db90ea1d7c935c2978f4017eab21b5cbd87d449c456dbd90c57ff21decae04c7b110123e390e9cb1f57d1984fdb03a8c1798b73cfcbdbf5b1e44c749e9fc357eabce2e00d9469d4f3f3fc03ae91bd10db0111684d602d5539cb334c6930ab700fa983b9ae92ba6e91752d6b71308740c11a2cc51e44628020aa6032a82eae7af13bde0145058bf4412b9d8c073f4c9fd2a86da28a22e6d054a332423de97a872257ac585250267057c087cfed52a5e51f8337c088a4ac5d060fbe394fe42f6f5b3d8f4816d2d06b5cce3dc573c17d6e6817cd8d9e33a5d7ea3060aac37b78ba6358b5dfe70e250e1bc2d30d20128f3f22ab86e1167e372a566b9e91f130db4e8f11fca152e0faa442286b5543a26963799147c999f402ce44c492717a4b137dc15d3147e009a5671ac7612a279ed5ec480113f178a0487ed640efef776da82d84b1de6f7b83919cd2c85fded1498267652090e62f35e2fb603aba1b78de69499f9ea43141814c1a7147c843110306bc59f74ab73089c20fb4c2757a2b8810299efbe5a934534c29de828a8a9b2936dbc3e0939330216b69f7b78736150b3fbb19e00b9e03aea14417cba09f27774fe79f7b2f6767820c5720bd652f966885c875b7248d4f2a996cfd08df0517398e1ea240cb7bf16a521df205be1f4595f4415c83c7ec75c86d98a57d6f6338711795a54c34b3346bd6db94c04737a0d4cae7ba1dc44cbaa42308e5ce520e540c8ff4ce1d30c0eaa3eeec211fc71295a313855d4589e63c8b40f6b0d5fdd059201a3d1dc1553bb4bd31b5d1a5c317b28341f8920096b4bcef5db183798c4e8906081534f141a439ab3bd4cb3cbc733b906ce01063c278bf65087a7ab04294cd942b16d173d868882d6a58727079a70df15f71cd6b1b2e481a44d167865ab5452f20e1931a6fa57510490e0e2b07191a5e811198b6c0913799f66f6df3cb25c7c22c0abc3b58590e3103eb1f4b0809cfc2e74f911324de0a11f09ddc4e28e6501db946d2a27c32c1a1baca176d3b8723b5a48f5a705200818d6ea3499f91b54e8235c6f9ca36521f6c98c24be7cf9d5cb30839fd41a487036adc2e9c2c80349a46c9da7af1ee4cf166f13908a40791e2837bdb324d6547a3bb1f3bba5ed54ae413017b9d2ad32819e2633b371170c14bd1ea7d95c3913c49d9cb4d88a4a2e32a31b2649428e1ad22e409a42d121b7d8f545487373192a495245f8e0d36820015a4f3e681583d6c7cc2334d4f0d21ccdfd101fc7412cbc8723d94752fd39a9135d3dd9782e16c93de80991b224775d222fd4cb5937189db3916ad2bd66e09d852acb5f63229acffd71a85669a180f4404211bcba9506c99da4a4b7532d79e291cc68f4146dbca5557cc21a55041b8446e70374842b84bb0961ddb994c91e7c6b05a91786fee138231ecf7565ac0c5b6c08e3d5fb6f56849f0c0a0b08dec86e7049caa97b51cb90c191fc1fcec014c169d200f4f919f7f2d778ac3ee41e7a91edb70a22e2bfdb956b1f5d91141686e1ad0d8545e0f650758e0778b18b89684a93263778fc9ca76d59810a5600dcfec43c7e5197c825865ac4155fcff727f207f8a0f4912a468028d587410709dd45927a3292a412c1b4e69f7bdb8e4133ced8afcfa1e1fbdc94e8075a3f3662ae2eb4d2477dc7fa819a619732c422c94ae85fed82b1281a6e515b38664fb786892e14568cf9cd65a04a25c64df950016ecbcccd82f47fd4f71c8f4c73492cde5ac8e9c1a6c484cbc620a127fac9d893bbb070d639f51da62a26dc0c0df2bd9b443bb0225317c2a2f308f4b1c284c554a25f69d88ec88e98b0f5e667af4abb00b95f646b9fbec3baad9fab32e09ad9e4b04f7ac344666e1e21dd240df2244db5b7d7edcd4800ffcae7e0e4ae4109912b0e31dbcad169f5e2845b726b58939c7007833d15c3aad64d16e518a40643f418c9df4869a91bf946e60955703429ef5937a1112f305ea8b5009bfa64867bfcacf731f3d3aa4a4b76bff43584", 0xaac6, 0x0, 0x1, {0x3}}, 0x401) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0xa}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16}, 0x0) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) [ 2036.923726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2036.973215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2036.998840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:37:16 executing program 0: sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000100)={0x0, 0x4}) 16:37:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) [ 2037.115309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2037.117364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2037.144720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 16:37:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) 16:37:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f00000002c0)) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r1, &(0x7f0000001080)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2b5, 0x40, 0x0, 0x0, 0xff}, [{0x3, 0x200, 0x2, 0x400, 0x800, 0x1f, 0x734c, 0x9}], "1e564753e51459f42377a4a4892f4e4c53db77962d0049a65842530b7b76d3b3c0325a6c989cb25066463867a2b230ef2e3722ed1dcddcf81ee8b3dd15149def3ef45f7fd4538a00300072177ccab771398fa89067c484d56653f2dcb2eef7dc8717ddc0b75500c64d40538f0e2c12342ebb38acd2d2c8c48cf5babebf44066a2bb82af1394b5018835588971d35cac0a6eef437919e673c5f7e8d4392c70d55d2fc6fb48429229eab8c17b6fff0bcbc063d4cda7155799e8b2cf4e6500f26cbdc8dae7f26b94c3a3238941458c1b5766b3b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74a) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x8}) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f00000000c0)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000440)) timer_delete(r2) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 16:37:16 executing program 3: r0 = getpgid(0x0) ptrace$setopts(0x4206, r0, 0x0, 0x200001) 16:37:16 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:37:16 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x5, &(0x7f0000000240)={0x0, 0x37, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_delete(r0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000380)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4, 0x1) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r2, 0xbcc94000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0xffffffff, 0x1, 0x0, 0xffff, 0x45, 0x5}) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f00000003c0)={0x7, 0x5, 0x1000, 0x8, 0xa8, 0x401}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2037.622958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:37:16 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getpgid(0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) [ 2037.669107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x3}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 2037.883009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2037.904242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 16:37:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c3b963d79a6100a7f1f55c7ee791c2d21400000000008000000486876bc551ab34"]) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./mnt\x00', 0x100, 0x0) [ 2038.225814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x4}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:17 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:37:17 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getpgid(0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 16:37:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 16:37:17 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c3b963d79a6100a7f1f55c7ee791c2d21400000000008000000486876bc551ab34"]) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./mnt\x00', 0x100, 0x0) 16:37:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) [ 2038.574997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2038.589342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.619287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.686349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.688038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.694447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2038.956143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 16:37:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getpgid(0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 16:37:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c3b963d79a6100a7f1f55c7ee791c2d21400000000008000000486876bc551ab34"]) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./mnt\x00', 0x100, 0x0) 16:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x5}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:18 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x12, 0x69844ea0a6ddcd11}, 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) dup2(r2, r4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 16:37:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) [ 2039.057386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:37:18 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8005, 0x0, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) getpgid(0xffffffffffffffff) creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) [ 2039.234532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2039.249825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000480)={0x200, 0x0, 0xf}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000014c0)) r1 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20d315) timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) 16:37:18 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1000a4, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') chmod(&(0x7f0000000140)='./file0\x00', 0x80) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="05e104101703c3b963d79a6100a7f1f55c7ee791c2d21400000000008000000486876bc551ab34"]) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffffff, &(0x7f0000000340)='./mnt\x00', 0x100, 0x0) 16:37:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:18 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:18 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'syz_tun\x00'}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) pwritev(r2, &(0x7f0000001140)=[{&(0x7f0000000080)="f4", 0x1}], 0x1, 0xffff, 0x0) io_uring_enter(r2, 0x42f2, 0x5422, 0x1, &(0x7f00000000c0)={[0x1000]}, 0x8) 16:37:18 executing program 3: ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000004d40)={{0x1, 0x1, 0x18}, './file0\x00'}) sync() syz_genetlink_get_family_id$ethtool(&(0x7f00000050c0), 0xffffffffffffffff) [ 2039.559765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2039.570400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 16:37:18 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x20}}, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5325, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x303c00, 0x0) fcntl$setsig(r4, 0xa, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5325, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[r3, r0, r5]}, 0x3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 16:37:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x6}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:18 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) [ 2039.966751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2039.993298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2040.312156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x7}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:19 executing program 5: chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00213d3fb1bccb8bf7b93907"], 0x20}}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 16:37:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0x80, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x80000001) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x50) 16:37:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:19 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x30, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@mcast2}]}, 0x30}}, 0x0) 16:37:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x5, 0x18, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}}, 0x0) [ 2040.417031] netlink: 'syz-executor.6': attribute type 15 has an invalid length. [ 2040.476274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2040.509656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:19 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:19 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="04", 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001e00)={0x0, 0x0, "7698fd4300fb7f55c3ae27a2658ea9e4feb4c24fdec5da601dec14b2e87bce398771ec66bd79c94823267da43fa3aadcc65905267c1a04ae2531995c2a485e523a3964c8743a854a0d8d7c52f2680aee8a4fb07d479dd27aca3233fe00d6b2eae487ef3b089d940c7298b7a20b03702bb645583595a1af5c145a833d80d20c59b0231d6142d44e37b601bbab610297e77e9532397961edb7b53fe56e7e30ec77d3237317e0adbc7c02444de8f57706eec29862fcd100f89875b9fb03adda52381d009ba06d2d02a8a1195cc85ca735391b5d054fa026f22fb009e1afedf6b6651a26d5682120545f53dbfabd2d489e9ac6432301dad573487acd5c52cf2350f4", "b2c526d6e9e5b6e022295656162c396518fb718ef4784ca130f8ca11abea7398779e5f0619f66a2bb6cb434a4fc5a35a1b3ca7712d33157f158041ca98135e758f4a8c75e4ef7cfadc804965a3057d1aa1deaa3ab0044cdab9e51d56afd287ff50d18b01040c7486febf13062b47367b6e6ed29adf6e8fb8c16751a1eaf144834e69d96019af742c708641d6bcf4ff9b4e4b0b96653d014cfac160761eb3dc503bb6bb0cc33432adddfe224c905c946f11b0d21e4402ddabda097631f93492677b2bcd4ce10515e5339bb72e6653d3a3a92b44d37b37cb6d501b420a0ba0b88cab773d59b4745b5ef11f0cb5b8337e7a6ce0472fe6b5ae5e8d3e338b84d83715629fb324719ee893ea4411234d8ba6e253d5dee46e7ab97b12623023266b3efe4d35c7688110001b584e0ecaea8ca1468d12360434b53ccbad63da60dc1755206d4680da9fe2408f44f73365887ee011787144c78344bd0c3622dce0dc3c02c11a9c5e00fe5f2bee40478f02556395d6de16acec1ff020276f7a8d4d8e9c339d39e7371abe05eb34f764122d6743f66b00696d88864b48d157b9e49310f659c81088d055a4f3ba533f62cb4e016d645a97d98836d7f66731aeb4b00d30184bcf77ae44de91ddba80b6dd79a1e73f8cc8fd1cda2a613b89526505a811df897134e67e7a7b8a7cf277cf52b32a88a0d3f1060c64f50ef45acadd210c8389dca7955a1a9cc3312b0297530545214d1c3b34e663984c992a99ec41c5964a414d27465080d8878687d782d7ba986a3f84718d9e7327f6188af1b0084e0474e410620968ae67965810b0f9f8f60274271f3a57fa43bac8546d3f925f67472784d3f392d69e482dad3924df358c78f30c15a21abc8b2b52794a015ce70b593aecc9fc0c753e1cc5e3891cd6f2b3c5dd1331f74fdae159654ed38501b4382fab41c5b986b58cdf527802462551a01e88988e10faa6bbc3815af0ce74395cb87b20896db42c23da8d424b7d66f0c2badc556793ba3e4a49244d21967be8077f63932cc3db31d77df4d9d668f9d9a6dc6405de24bf7ff114e0b98bc8ed382fc8d1de65f10ea7c119272940a238c8ff6e9ce01d4bb8452d39e1c60ed6dda0ca363f56e084b65fb4b07952af0fcd87f9f4fc9d15f1d072945453bf51f4279d1ac5a40af7101c04dcccdc6b73e9e3d01504bda8628acfeaafdd4e4b066e3d382c81864d5e349df7ae672b673c012ad6718b95b32ab64667b582b6a867b5374266b09f5e4a13ef5084f3ac63796559aaf5d543c78d108a1eac42517b1f55c93acd14a1f5695165955abbf9478e63caf8e89eb82a21d731f8fa546296350e7d472e80fac59b502a9705bbc1e185de0ebcc85e0edeb65f4bcad80ffa7e6373ece07e1048798804cda27665072939558de0fb35e6a78997c4449f60034022a7bfb3bd3aed5a5fa635475046b8d374df084f047eca3f42c089e830f7f01d917150ec790d9eb42bedc3678a0ccbbf808f8cbb1a6c1e7ee3a882d33adf12b5db0275d32f0bd3850e4ad74fec0fdecfb2c8c47950454d45dee8162969d1dbd0c53ec605dc998d994ff8e5ea86730e794e9ec2427d4ecfa388931b008ffa0056012842ef6cbbcde3da7106c7403c083d7fe98df2dbd0f023d0d8b263777a0c37552a6ea7ae6aba532996783886429b622b194ec03c413bc02fc14ca84f230f678720c2314010228c1eb3adcf4027029cbb15440ac0218d1067b60db6c258350ce2e2c51a15034bd7dac2d58ae79ef2849a3a66a0a55b237a71d7deaefbdbb3dbaf3a0ac610a776ac600f4d5023f1d8068747f960d145d37b6a594df10bd2a1a9a2e8196408809e53acf7ecacc3be3a3c9af76212a756620548e62b0db0ae59ec55fb77933a7eff4a42bfd959502fb8e81dd5db1caf9410b2aacecac863ccc96a989f01f3422124b336ec90d74291fb1b72fe07c6737879aae4073e1223683a1d4f2b3f8c79bca5b0283ef3d0b1094cb066ceb03ce36859e3d4abe39b1c93fb5a32a786a8b77fdbe733eddd8e3054e67f2138fa83ab6c121cdef8812816d48ea1d069527a42c38e99f5cdb8fa0f7b8b4c68b1f633bdd5c44d42641b6352f7d06952f258aaba5f80d724570691aa6fbbaf713b8dbbef58cbd8e765e182cd391a12d9647433b446518dcbd76d3969f523413e7932f365c8d19784920747a586870d15048f27e0cc0b6ecc95f152accdb32788b1a4e2c3175e55b3f8c2c5bcbd3c9eaf87d8e022efcfeb0a1588a172b8d89242e3dc72c9212589e1060379b9546fdb90dd8898569cee7059e0151b0f1ca03d4aa0ef06720d606673bfd5c1cf32ae8c8dc2ea80d4112da597a86ec91eee27bbacdbe659f9973b8858aa122dafc3bf28b2dba1e047b7ee682dabfacfabfb63ae22f721d7ed04c4b9d04916465f0b24acbee73ed61d38056215c3e2079c244ddc4093accfc91167162d11cd48f410d28c75aba063ef8bb89fbe492c5ba05b354f53dfe4337baa8250afd6ba7e0cb6a711d9e0e33c26a9acf46f609d67c5689b452b2724b174ef07814e187fbd5d795caa6101ab73048854ef4a3262486fa7234223590e4f486edc7224d94cb4abe2da96094ecbb9e60eee39178982a963af41d7d816287e3c466a41c3e8c3847c259387cd4daaec193fce86992e57266a915af622893d5ade291859c9a7d121edb0c543256405f78610600d5e5f6b987f0a6e4984f0d591d63717758bc3b61f7778db7cb7236f21d7f9e27e473203635d68abddfd8ef7507458699836f8735e9c7465fc4d24eb64f812b8faa6612158d75a2797aac5adb14f96e3ea6a53d60670d6429d087f1f258c6ec18f5520e17e5141c1385a25e784cc486e8c4aa2e548ef9bb567f7d9889bb35792b63e8c65ebd2f236c84ad3648fa839c68aedf088b33c530a6bae7da266740389fd4e07128f38e8c6c55b58356948c8d697546695b43f3f1175357c03c9aec84501c92b6bf62466914bd19609ba12b1e7d69ff90b4fe27dc11b3b4c49dcc58dd3361830222d7a9f67d201004010b4ebd65218a075fdadf19f6ffbb2b11e26e998e5eebbfa7defa0d74df4ca47c80ee566140520242855bca81ed15dd0f781a622218b146429d7500b1d5f93963842fd82c3844babbdb7cc433cba86274eed63c8c3784b13827b3db1b09c3c2a5d7159792bba7b22f08b86e7b55a954581c27c3b7b92d91cf5f59791ee79eed919bdc8f71a39674e914211697313fb062f3cbab09c3745719043534ad85f18b176a0771062ff54d3c5f7f79ef4b088aa81c8ad9bdc4ed0f824d88a2f4afe5b4d6c78dc1ab60e1c4f07a00a753b71fbbc24f4006794e181c2350f748f645519af7f733119f5d884a977accb786a2cb5d23064bea656363c61d0b87ec3ed4360fdbecccc0e224e98ed80a6d749c8d3ac73449809db21847ae9e5a4d034c3c90901f98c035cbcbe3b6fa55fc936e19cbf842dd7fd1e7e9d88ca88d797938034f9db0d3dece8e50a4e98e14e6bd8d96b0a7fb07810831bf2dc72154e12c366c5f7e0067805bc926a496d00334180d715a234b06ed266d78b2613a2faf9d06ba52f271cb8daf2c73e49f8946ed1144812e810b1129f473f4d3dcbabf9eeee67020b4c7a87a652e694aba30e05a94f97fd4a7ca9885972b7c421adaa201e8e48b95d39f917ab97063025d768fb1a2737ca1e80dada3a6b70d7ef9ba1486143cf615980886c638db237c6c9b2d1c5dc863eddb563d606e757823d707b69e294c23e90447b692b499347bff09e23c2ea726be5c772c156c95d29602826686c9ca5210915bb0d6fa13088192f2924b645693fcdd3b0c2d10526e72a31930bf0150878a67a97debed3bd77a9d8ad0699b2cfcd7dd6a19b102200162d7c1281b63ed9d9ab1a349b4e639cbc68d91f07ee82bf18771607ef10eaab4d64c75ca10b8f74a25c6a4395d4e66cf7b04e695ea318a1c97626a9c3dbfc7ddba372d0e579ee74dba82152ae9562cb8af8fa82783d2aa8ed295939dd5069cb32a82e1f4bb65aecd427a7ed0301852d33e612383107d4e8deffdffc7653262adf4d1bcc008d09a126a3383da3d254a5d82680ddb2b1d556cb6788bc421dffc4f7a8570d051b9e3b9eef5456dbe769e7ab5502677208d7444ae8110c280507986440e4c928530ce9cdb9513f4edc0dd8797968c831dda80da1dd2d09bc740383b14a4f3e9db31a9b83ef4c46e2dbc7ddaa91a2de5f845b41bd4ad6df5684140afad979902bc986f52fcb3ca36eaa33709803ad23e9cb7f12854df0b33d7670e717a64d7eef3bb14bc81a71a20b4ccda9e6bc092726d8ec2b3427894141b45284f5c2392600f1234c9ba4836495abc107cc7384c13cbd52597e5b58996332b055a8fd0e49953ca3f0a0ce2fd13f9ae2d4159fa86160cb8e6f8e08d815c069d8105347880c3201737917051c98d6691a6473d8e1899d14d51b8936544bdcea11a1e2a3d27acba118d76118e21063950394709bb75cb755b29b861b99dcaf4e9f2d0958002285015191a284e229b7c00b37be3ba8dfe4508ad6074d942c7aba4ce4c7151bb02a74ad096621659a6c49263b4a7bfc20047a3a59793852234cca33491a1a0d0cc0f34699d101c6400aa0185cc9eb779d52153bf2dbf63efef938075cd1c12a16908670a01b9b09fd22dfa7f80146cf723435a5f0189bcb33741072b5d4175015183be164d1aebe68001572ca2dcd6f3fbfb2c0f0ca71451f75b7acd735498605777a962c05988ff4e8c7cf6dbd811c163717fbbc67b6d61fe22a452f38dcfc4a6cef4030cbf94c6eeaa6d6d0c1a1b0e6af4aa23cf03eaee073d3e7f507e5a8c7038c89b1c4ab8902e03fb69c9add264bb7f6490601bb52c060cc60353c9eba0313124187c32d089cdd347bd2131b91312a5ae92f908180597cdeebeb84d908a96ceef1b179408b37fece5f240b48f2ce62ffca7871efdea8b76c0e1ee3a189023ba2b6d848cd8e2d0bb5b2df9e1d81801498379182e30eee4611387d9caeb59ff05ffe09ab2d368cda061081d639895bf43894117d49a4c5722662584250856c264fd128df65e2ae0f3ced1d4676f6af99737c9fafa78d14ed151f6da3a65e9b0946a8efbc0715b3c9a82845dbe26c70d1f68c1c79f64bcd6a58aee6130bff0c51e963c4d7d859e16bb0d42cec42032322581a7457553b8d233c2bcb93fbc8b1d8d3973ee174a2448c34dab4698ca6e58456e6070d1c45ed3590945e99a826bb875ae6ead5308c915a42a075d5e5ff1acfa181cf8f9b43c806b645ce199c28c3329ed30134ad1957c297435ec36662a6be42097be8ce8b6722107042c7ddc3be6f7bd72c9153ff413dbb007eb99bfe4057ee3d3cf3e1a93d7baae3bb389e3f07816529d915640dc5af5149f7b8458d"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x80, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x41}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x8800) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000002000210c0000000000000000020000000000af0180000000e909192981073a14d1a9f8b55c098de892c7e960d25a1ff7646984bb0a433ab15d2e8b9d8736feda83ba30ca7ee25f49923358af118787439f4d896fe790e5031823d13664078acf855ecd2842c29b29e0f7481d3eb31a2fcb1f580d1e18f9e2ede9a4c841cffe23e695a1591e96dcdc9398d0e6cf29a0f99def6f31892c70154d1254fb0ddd23c10700b1dacf78c828cf5505157ea420bcf3eb02506ee8cded811d7f1c5f231a37832f2f5bb27c30c0a05bb788365f2b7eb445cb44c2b531f93805fb01ba7889f0"], 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000004c0)=""/160, &(0x7f0000000000)=0xa0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003e80)=ANY=[@ANYRES64=r6, @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf251d00238008001a0002000000080017000300000006001b0080000000060400000008001a000300000005000e0003000000082003005988cd64f7de11468d4eb9d972a810fdd67b00000000000000", @ANYBLOB="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", @ANYRESOCT], 0xa4}, 0x1, 0x0, 0x0, 0x10008845}, 0x0) 16:37:19 executing program 5: chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00213d3fb1bccb8bf7b93907"], 0x20}}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) [ 2040.877277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x9}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 16:37:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:20 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0x80, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x80000001) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x50) 16:37:20 executing program 5: chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00213d3fb1bccb8bf7b93907"], 0x20}}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 16:37:20 executing program 0: r0 = gettid() rt_sigqueueinfo(r0, 0x1c, &(0x7f00000000c0)={0x0, 0x0, 0x1}) 16:37:20 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) 16:37:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) [ 2041.166419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2041.230132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:20 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r0}}) 16:37:20 executing program 5: chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00213d3fb1bccb8bf7b93907"], 0x20}}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 16:37:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x751, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000001540)=0x5ab, 0x4) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x24000000, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000180)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) sendfile(r0, r1, &(0x7f0000000300)=0x6, 0x7) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) syncfs(0xffffffffffffffff) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000380)=0xfffffff9, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) 16:37:20 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x4004, @fd_index, 0x80, 0x0, 0x0, 0x4, 0x0, {0x2}}, 0x80000001) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x50) 16:37:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x88ab470809e5749e) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8800000) [ 2041.539904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2041.547848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:37:20 executing program 0: msgsnd(0x0, 0x0, 0xec, 0x0) msgsnd(0x0, &(0x7f0000001740)={0x1, "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"}, 0x1008, 0x0) msgrcv(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 VM DIAGNOSIS: 16:37:17 Registers: info registers vcpu 0 RAX=0000000000010004 RBX=ffff88800f580000 RCX=ffffffff81f4a574 RDX=000000000000c062 RSI=ffffffff81f4a582 RDI=0000000000000007 RBP=000000000001c062 RSP=ffff88806ce09db0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000010000 R11=0000000000000001 R12=ffffffff853a0c80 R13=ffff88800f584338 R14=0000000000000000 R15=ffff88800f580008 RIP=ffffffff81f4a586 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6c40d6f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6c43909000 CR3=00000000393ea000 CR4=00350ef0 DR0=0000000100000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000ddd106aa EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f6c438e07c000007f6c438e07c8 XMM02=00007f6c438e07e000007f6c438e07c0 XMM03=00007f6c438e07c800007f6c438e07c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff11009bf8307 RBX=ffff88804dfc1808 RCX=ffffffff81280a01 RDX=1ffffffff0a14fbe RSI=0000000000000000 RDI=ffff88804dfc1838 RBP=ffff88802f87cc80 RSP=ffff88806cf09b70 R8 =0000000000000001 R9 =0000000000000003 R10=ffffed100d9e1362 R11=0000000000000001 R12=dffffc0000000000 R13=ffff88802f91a300 R14=ffff888008acab40 R15=ffff88802f91a300 RIP=ffffffff816f7f1e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe070cc0e8c CR3=0000000034cf6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=c0b5b1cc7613a63a15a8e89b16f3c149 XMM06=e603bab05ffd2aef5e917d3d19c9e7ba XMM07=fd0f1e5e692d51e3b0edeb93140c7e81 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000