x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r6, r0) 12:07:05 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x80040000) unshare(0x48020200) [ 1800.121138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1800.176036] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1800.239971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.241765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.245597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:07:20 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:07:20 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:20 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x8cffffff) unshare(0x48020200) 12:07:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r5, r1, r1], 0x7, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) io_uring_enter(r2, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000003c0)='!!$.-]$:/\x00') write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000000)) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) io_uring_enter(r2, 0x5bbb, 0xf32b, 0x3, &(0x7f00000000c0)={[0x20]}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) 12:07:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40087602) 12:07:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:07:20 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r6, r0) 12:07:20 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={'nr0\x00', {0x2, 0x0, @remote}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="07008dfea6dedee5bb647e395b3d94af986ce4557e6c47a57838eb022760711fcd0bf47083820f995124d5951e085c034caa0d0b5a41ec2845c30b63b2240a45088670d2c38f211f8fefbbaff1b147c111af21d03b4dcfc604a3d4de9e16922d6d0e2c7829376d0694dc4dc716f1f3146a95ea29e5a3c039f2077f62411a466f5e05c791671b6773d9e36184d0f6720ba100"/161, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) kcmp(0x0, 0x0, 0x0, r2, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) ioctl$DVD_READ_STRUCT(r4, 0x5390, &(0x7f0000001000)=@manufact={0x4, 0x1, 0x800, "86a72e61080cc3441653e2c08c05e55961edc1dc98503478842f066b5996dbd37f346b9dd9e4a99ad74f8d37b96f73789db2290e2cfed3aa2fff30f81ca4c0b4851d0ba64c4486f84ab490676da7f91d9c47ea7381d96d87072b929604aa9f3b0071a46b0bf0342bbb4ebf3917d121d42ca73fe9b59e2bc2d5114c00986c3ee3f55457309853a3d6d965a3a54b4cd1866503c3d7652823e318c83c81a12d1b1fb9786b1ff18b0e01fb26c6808b8330dc6d68fe165dee0ab3d14e6afd29d433068b94f6ed5e413f3053aca62bfd3a629574ea8d4c83e076a8d29a2f9d9bf54e83b46bb45e56478b28d064374dec38fc5513f9676515589b29d11c77a66fe75255121f4f5a798bfccec46a96d32a0ca23eb81b0918cc9063aa46f8cada1c04ea7fe4263d763b167876d6be77d9ff7cf5fe2c2b368d3e3182694d784514b612abd5cf84d42ae3fea8eb392bc04c6dec17661ff9ef39ff2c45956d795d3e530a87580474a3903adcda0b3d23dea6622e17462aa633413446f8015e60527f77b4b5b20658db71b149d8faf03020713b06c36a99d39c4e9af90c20c4c0f4a7c9b93dfbe2644ba876ce059b9a508140533c61333a5eb2b669ee7f181e867b9193df279594936e5826bc08d910df34b1fa02cfd1b6762e603072390e07c9cbc722a16c6861c841cb283b7c94c6e9baf7b4e3f5e200e5e2fdfc2b2f922f41b5f550114ce34eaa2c8b10f1a08367ed72ceb450111d6cc385c4b0fff28b7277378ff30353761e16003a476adc3073f859097dd6eb72f162893f279f447a82a6871ef4296e7559191e9f7056118092f0554342430d55a04f0f77f93183008ef8f490cf41e49d0d4d5af745c3705be84f39ea443963e946c6513be16f555e3a448f373c3e02967b95430c25dde0d050eb970cefea2c52653066077085f407fa21293c15fcba4888a579e89221f156d55427624ec2d6da42ccd7cd82e3550dc72de685ebf37861a4dec9bda69d1a3a67dec09363b4b3533cd47c23f6527fdeea5ce0cd1d38e5c5260da6c6b4d3491273ab6e1614f427d16b259fa6f44b1e945c036a5c24d002af5a6b04d4890b2c2ab8f6c2417880edb94b4dc0897a1aa571d2d2eb9ba3e8569db163b1e405f02f463818a235c95598c860ab63831abd12afcba295f4ffcb59a0dea6c0df87b2c814deb9f37457f17f826ec07f34f80c7fe39c0996c52a95991f75f0aa8902f5ff476a25cb1f9d71809cb917662788a86db754b32a56ee2fb9480f833c8d5159e62c1db11d8eb4313d2ec1b122813ea8472d4996ff4d1e9abffbd6395a4a0519702d32bb6d97282d62da4278de7814d8b75fcf32937a6cd61bdb4fe55d12aa5cee9330a5d349b4023aa207d720fd039e9f789ab95d37471867baac17452e6dcf4c700f0bcd1bd3e0a37f98c25c41bfc0f30dd3685237d052ef0a35b7cd1674f9e6b9e5dd43be9985033c0d0c216dc308234bb1348755209f16824cbaa5e64683f3b5510683e69e72ba0d13dfc4e1563ffe370f04e0c5d635befa90a2778bbe9751d99886994ad8f5ae5a85c0a3bd0ab644f85694ae4385a3d5cd2c9b4c8f26988fe7d10fd84b153cb205e3fab55a88f48172bea2b4bf22f1e89eb3b952ad9165d9e0b0adbda72cdaa1aaaa99c2632d95d368d2a5cf11b823a69648e05193d85029d91e9ed942902bf0604be6b1547b8919ff25274b3dd80ccb70289d6f243b8533a0af091dd8b3cfc061a2a1203f82ffbb29d7bfdd0f88b698b5374be445dbe36ff06432c64d22736bcdeb131fb6b361d747913848e3178e292c2511abee62b117c862facaa1faa72d31d70d8450f9ca06aee7cc632eb211e7a81bd7cac80bdd438a2972c7eb0ad4f35256c9de9c38c561de1131d3a11e8437e01bb9a678b5a05172e27e1bf5bafe062a1f30496bd7dd2baedc03e2be1adaa408c58a952dc837e1fdef19d626c4735c201aec25c7a9cb0a62babdaa7b346cd9646994deba4ab73bba8b61d77d15bbb9494a163c6d6ba414a48346a2bd73867a7f516b784a16f5aab221c619260338a51557c71549a05833c6e2b56304d7294b6551f56fb44a7bd08424f146e9af59a984878ec4f8cca93d8754d9600b076c17d0e4de2e7299682bd8daf44e9241c5e45a675acd22ee2211b886647fe4e7e26f4107465e25cf248e0a02fed071117a686ba4048ac0c61a10e7fbf574367716837c1735202eade85d3753ba151730edb3ef7f3bd5cd67aa56dd4487aa0e04728fa06a9cf84b6b853570eadf4ca781c203d0a377fa6639a8ad25da34b6eb47a9083ce1ed46be65be97118c20c27c441e17b115e7f85835ec829331766ef7c6dbf5a9dbbfd36b4a9d815b683ea348eeee79ec442d7635f949ef4abe6c27aeb3d3b64aebc2a2fb04bd7dad2a1d917ab221e00040f42883005bee0047d00a9fcad805d2b0a4563ce2304004d5bb017940892f2e60064ff8a8cbed8e26d8b169da97f75d3dd93c555da58aed3512808de5a817c269a7415b076dd1fe7daa0607b5e75c2c3bb8eda57218fb305760a60f10d743ba28b89ad9aee823b4314e3ca97edcea90081328c645fabbc0f118cd28063877251d3874a22e681134f731ca9ecec9a3eb3a6481b0b1d69bbb0f0bd4cc826f3f7bb38952acac43ccc7a932c36435abee29e24e655d185071101fa5d5b09374dbdf4a663d40886c6c7eddf04e748e2bc63388dfb004367877ac05f96279ccba2d4c73b95b0c31ab7c938c3cdfc1cc26cf94a6eaa62bd54bbbd1c9d961e1acbafdd57b342d7ad9306b5ab10ddbab55562aa68ad622f1bae258dd191df6cf1326f91fbed56b0007ec92fac17f3735e519ee98c33fc19ab0e48679f0fe56c62594e042737a46a8fa724a0e33d7cff313602868"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1815.391083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1815.409683] EXT4-fs warning (device sda): __ext4_ioctl:889: Setting inode version is not supported with metadata_csum enabled. [ 1815.424518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1815.432077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1815.449681] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:20 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000007e00000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r1, &(0x7f0000000040)=0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0, 0x800}, 0xaf) [ 1815.496135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1815.520807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1815.522530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1815.524549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:07:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x400c6615) 12:07:20 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f55d381b31056"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:21 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:07:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0840000000000800000000046c653000"]) socket$unix(0x1, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x28, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x3a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r5}, &(0x7f0000000040)) syz_open_procfs(r5, &(0x7f0000000280)='net/wireless\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2d, 0x24, 0x70bd2a, 0x25dfdbfc, {0x2}, [@typed={0x7, 0x44, 0x0, 0x0, @str=',{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24008050) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, r6, 0x2) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000440)) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) dup(r0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r2 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, r3) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') [ 1815.842656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:21 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:07:21 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000000040)) r5 = getegid() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)="767aea956cde3a97d353c1f21f3dcc9f934083757dfe183f6a975c9c349751e05535aa9086b41e6f81ba423fd21f5c96f838c9c9043bad2253b37e26a86dac71ef85e985f5e812bb4b7d2e784cba25cf9db702c4136b4f69cbd19bf8a8855250fc6b5a2cdee18314960bed8a8f3fac0003248bfa5f8e31291d683d6b03bfb7", 0x7f}, {&(0x7f00000002c0)="4306d69796daf6f1aa54b86ff63f69298bd861ae5af689d60269cbfa16b64f4f2563b4e2fcf63d0f8a26d5f4b697345d76079e2486df2058e8d3d271caae301655d6b30b4a895e51d147b3e5b5a05a48c85d1610711b6f27a6d7629a52ec0c31c9204f2e66032ec3aad8d756a43df154b8b4f10a91e3212dca20dcf8e00b2ab401042a18a121c838a37edea0738234049345a97652489fc18d90a6f76c1db150669f89c3720dd89038dc", 0xaa}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r1, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0xc000}, 0x4000010) 12:07:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40106614) [ 1815.956999] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1816.030481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1816.050970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.053097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.056198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1816.195101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1816.217713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:07:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:07:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0829ec65cce4"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000112000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4a004, 0x0, 0x1f, 0x0, 0xfffffffeffffffff, 0x0, 0xfff9}, 0x0, 0xffffffffffffffff, r0, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x8e, &(0x7f0000000000)={@link_local, @empty, @val={@val={0x9100, 0x3, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0xfe, 0xaa, '\x00\x00', "ff4457944fc2d5abf5e82428aa81e7db6316d7a614b8b8afe1b2c0de5fb332691a8b87af6dfdce9c94b20a569b11bc303758416c63a4be851478040db170c1c3d35212edadfb599fb31c5bf7abfba882a3bc74c23293d89542456505251acc3fa25c8decc15eb30b9445737b6b278f6eaee5e40d"}}}}}, 0x0) 12:07:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:07:38 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xeaffffff) unshare(0x48020200) 12:07:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x401c5820) [ 1832.820131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1832.853948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1832.854113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:07:38 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0x10000000, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$CDROMCLOSETRAY(r6, 0x5319) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x300000, 0x100) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1832.871347] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1832.877910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:07:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x6}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0xac}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="00cf00934041174f73032000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1832.921207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.923269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.926537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:07:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x4020940d) 12:07:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:07:38 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xffffff8c) unshare(0x48020200) [ 1833.250806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1833.322207] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1833.365975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.367667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.369709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:07:52 executing program 6: r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x10000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0xd0, 0x3, 0x1, 0x4c, @private2={0xfc, 0x2, '\x00', 0xff}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x10, 0x40, 0x21, 0x8}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x1, 0x6, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000f5a3000018000045", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:52 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x3, 0x80, 0x2, 0x7f, 0x5, 0x40, 0x0, 0x400, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x400, 0xb7cf, 0x4, 0x7, 0xfff, 0xfff, 0x401, 0x0, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x400008}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:07:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000300)={0x0, 0x10000000, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, &(0x7f0000000140)='./file0\x00', 0x18}, 0x0) ioctl$CDROM_CLEAR_OPTIONS(0xffffffffffffffff, 0x5321, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), 0x1, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$CDROMCLOSETRAY(r6, 0x5319) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x300000, 0x100) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:07:52 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xffffffea) unshare(0x48020200) 12:07:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:07:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40286608) 12:07:52 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:07:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 1847.465935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:07:52 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002e2f666948f00000"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v3={0x3000000, [{0x1, 0x8}, {0x8, 0xd7c4}], 0xee01}, 0x18, 0x3) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1847.501725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.507657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.549167] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1847.572159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:07:52 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000002c080a3df7018647", @ANYRES32, @ANYBLOB="0800000000010000f3952051f9058a24eb409edfaaa09f9618d4b13efad60686b4f21cb622ff2edb52e00e46e3d85ca5b1e619363ed9fc5134c51b6bb92b47c47c6698f02dc77bd8bfcf77393f5c7bd6eba7ab1b6c75eeb391b440df5770aa552de7f790ca828accf4d7258f47040e6da1cdb0c25f67458f978a857d43fa8c7e3ebb9ad6b0112c5d62163f5797d3b382fdb3b3a4931c1142fd4ef542ecbbab29a57c9b113bf6e24c05743e12adcdaef5b134e4cc156596aef5e53a2126c0f1ce5d4d45b5877454021814c0ccc14c8105a91e23e86860672a02750fbd16ad5c56dbaf96fd9bd307f869c1b7bba5b902a4249ee99fa6df0f3f45f1190d7739dd52564fbc5be55396ed8a223210128d6af93adf73b18d8fbf3d5820052791ff0fbb14227ad800c9afb3d63e2004068eb4d090aa9819068af8a69559a23c005c23aa91f0e415192a3a8e7efb05ab8a9c61a6346b4bbdb84a33cd1b7149e0ece9de7287670371ecc2af5660de21756d86ff7f0000000000001a0508005c"]) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x6) r5 = fcntl$dupfd(r3, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r6 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) mkdirat(r6, &(0x7f0000000180)='./file0\x00', 0xc1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x8}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) [ 1847.619286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.621177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.623754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:07:52 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x3c) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000015c0), r1) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r6, 0x200, 0x70bd2d, 0x0, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x714, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x4040040) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f00000001c0)=@lsasf={0x8, 0x0, 0x1}) 12:07:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40305828) 12:07:53 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:07:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 1847.905089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1847.918815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1847.931529] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1847.974010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.975673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.977439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:08 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x8000000000000) unshare(0x48020200) 12:08:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40305829) 12:08:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000018000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08400020945c8e82456bb342d4d7ea1a84b500000000002e2f66696c6530008a48619819819303924b9fa760ec3f1d8924571b62ba6fbf68e4c748e0b6f1334e899d7a9d05db0d"]) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x74ab, &(0x7f0000000140)={0x0, 0xdabe, 0x10, 0x2, 0x56, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={r2, r3+60000000}, 0x1, 0x0, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x3d}, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x3d}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r4, r8, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4008, @fd_index=0x3, 0x3, 0x8c, 0x3ff, 0x0, 0x1, {0x1}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r11, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:08 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:08:08 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0xbb, 0x80, 0xc2, 0x4, 0x1c}, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="64e7d326c1e3", @rand_addr, @multicast, @remote}}}}, 0x0) gettid() syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0xcf, &(0x7f0000000200)={@multicast, @multicast, @void, {@x25={0x805, {0x3, 0x2, 0xfd, "ad7e1d3866bd50bbcf6df018ba70393131a5141ed7ceb5c9733da3f357b8ff63131671271ef85c8a4d87a53f6e5b2f7823b1bf79905e85bdea61cb6a3c70843e99110f463deee317a3a8216ecc9a71376b1aae9882611ad4ebc1a373f32a197935c502074eaa1ae3c3afe4b4c345b8502f8acc0add5cb19cb3b0074aa9ac5f113592c92fb4ea88561f0b050d4fad4660c1f398fe31016a7b0bfb5b572771de0831bc3e610d1c0344f1725f25031e6747a24248255f50824520528693afa3"}}}}, &(0x7f0000000300)={0x0, 0x3, [0x700, 0xc69, 0xf27, 0x5dc]}) syz_emit_ethernet(0x1314, &(0x7f0000000340)={@broadcast, @random="a00640c568d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4ec73", 0x12de, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, {[@hopopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x5c, 0x50, 0x9, [@local, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}]}, @hopopts={0x3b, 0xd, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0xfffffffc}, @enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x30, {0x1, 0xa, 0xff, 0x1, [0x1f, 0xfffffffffffffff8, 0x3df9, 0x18, 0x1000]}}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xff, [0x8, 0x7ff]}}, @pad1]}, @dstopts={0x32, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x81}, @generic={0xf8, 0x35, "c27523fb8999645b74f11be0c7b147930c6c926bd2b26bd6f7aa654e9f8ce66db367cf6b45f7b6469332d334ab5698f66408622f9d"}, @generic={0x20, 0x2d, "472aa5e16c59ee6e7e11877806618b794000fa5b9840f72f5776377123b30391dd3167bd1f1d7c7baafca93810"}]}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x18, 0x1e, "9777f00579077234575345437a3a52ddac179723ccbbbca1c93b383bad7954c9e31a16d5b245b67cd97df1fd99a8fc6fbec4bc52d6a6426af19211d40ae763c42168f9895db8cf76a33a51a3ea9db715211faf355def8e27c91a6f4dcb6b1cb6ae54899558a1ac328d40500374974b84b08679bf9a5c02e6c8211c1da4eaa666fd2edb934c4ce7a71334af293f8ab2e1ce299167cd64bf0cc9086fc13df431625c97b6689f65647a05cbcfafdaaeaeda903203ee1b17fcebe14f2ffa1a7e30fc68a758cbb7f5d261325fcd01ad422381ed9a1f1162a251584f500b16d7fc58b15f5647066c5cb77076c5c4920254a14b6d59"}, {0x5}, {0x3, 0x7, "d8cb67f057853e6e0b4a08d7789c1424efc3d54be927346de25a0dafc1ecc2ecbd62c15c42d6721b02f08ae4d56fe14b0ae7476579b094d5e360"}, {0x2, 0x7, "8f7be6b453c069a135213f805466a5de4574f7d626308da1f6684cac835a4fb42bf7de8f22f6b45ac571a70465d68b232718d3267d81c52f3bbac8"}, {0x4, 0x200, "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"}, {0x22, 0x3, "313081592ffefb8b594bb8dae23e6a0459df287364c378a39d5a05"}]}}}}}}, 0x0) syz_emit_ethernet(0xd1, &(0x7f0000000100)=ANY=[@ANYBLOB="fc79eef97806aaaaaaaaaa1d08004af900c30067000020019078ac1414aae0000001863100000003020200067d7c0d5b011144df3a832ac3cdb77cfea5910ca37d000fff246e8048202c9bf0b39b7c6e0503e600014414cbd0000000090000b6660000000600001000890ba3ac1e00017f0000010000040090780000000044bd000000650008018400000a010101ac1414bb00442023c0000000000000000200000006000000060000000100000008000e000994040100861500000002000566992a040a6e37466fd2373aed0100615c39"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @multicast, @val={@val={0x9100, 0x4, 0x1}, {0x8100, 0x4, 0x1, 0x4}}, {@llc={0x4, {@snap={0x1, 0x1, "5ae1", "c4352e", 0x86dd, "7ac15243d3690b3961356f9e050c53902b26427575c265e3e9114c16c8bdfbc7a55155099e197a"}}}}}, &(0x7f0000000000)={0x1, 0x3, [0x74f, 0x4e5, 0x367, 0x4c1]}) 12:08:08 executing program 1: syz_emit_ethernet(0x118, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0xe2, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x0, 0x18, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @generic={0x81, 0xb2, "9d9e3d9ee0588cf6d5e06743410abde5822e4b5c2572ccff90f53a99b2d40be3c0456cce9d5b5c6944cc29d4908120358ce865af099b5a219626c7387e2257854aed4594b01332896d51c02100156677637ae82a30df62ce87df10adfa9333f6db849da98b3bebb7ca707a0f4d15bc419c31df14a0e7aa6797af1c30bf45081ad2e3bad514b173f4778bcb16ac38042663890922a47277226672575be7e5e2168f7c6530ac1c85666bf2c3068d3b04903eaf"}]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{}]}}}}}}, 0x0) [ 1862.835631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1862.861868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.868058] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1862.871647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.875050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1862.903768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1862.904988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1862.907340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x4030582a) 12:08:08 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:08:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) dup(r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1000}, 0x1}, 0x3) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='\\-.[/[\x00') r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0xc76cc000) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000200)=@ng={0x4, 0x14, "e2"}, 0x3, 0x2) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {0x0, 0x0, 0x5}], 0x0, &(0x7f0000000580)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@hash}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000840), 0x4000, 0x0) clone3(&(0x7f0000000880)={0xa0200100, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), {0x32}, &(0x7f0000000680)=""/25, 0x19, &(0x7f00000006c0)=""/238, &(0x7f0000000800)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r7}}, 0x58) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@noextend}, {@fscache}, {@version_L}, {@cache_loose}, {@posixacl}, {@uname={'uname', 0x3d, 'hash'}}, {@version_9p2000}, {@version_L}]}}) 12:08:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="c15d00000000000008000000000000003000"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) r3 = socket(0x9, 0x5, 0x2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in=@private}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) finit_module(r2, &(0x7f00000001c0)='\x00', 0x1) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018004000", @ANYRESHEX=0x0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8001}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10480, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1863.112018] audit: type=1400 audit(1744718888.456:18): avc: denied { map } for pid=22721 comm="syz-executor.1" path="pipe:[49577]" dev="pipefs" ino=49577 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 1863.120672] loop1: detected capacity change from 0 to 8388096 [ 1863.126960] nfs: Unknown parameter '-$' [ 1863.145601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1863.167530] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1863.183737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1863.184992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1863.186050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:08:08 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x100000000000000) unshare(0x48020200) 12:08:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x4030582b) 12:08:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100f30201a5d1d29f49fcd97a78c53e00010000001823996454e217e6f9bd0964de40546cea0000c4a2ce26292fed17f9a900045100", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:08 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1863.393650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1863.414629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.435144] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1863.458954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1863.460747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1863.464944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1863.471670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1863.496731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:08:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:08:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:08:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40305839) 12:08:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd=r2, 0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="3b7f121da1ffff391e08c02876e80ee23913e6d7196e02e5edb4a100e9e4fd539f4c2594f467f1d84cb500f6c4ac6528d80f5bedec7e168f943da0d27eec2209418e977b6e3f9b309f67636f9c46f18ac69b77c94ebf609484b9b869b354df2a016c6607a268a5d7cb7f550d58d777fd0d9c81649fc3192b82", 0x79}], 0x1, 0x0, 0x1}, 0x3eb) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:23 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x200000000000000) unshare(0x48020200) 12:08:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653005"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:23 executing program 1: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x9, 0x400, 0x0, 0xd2, 0x3}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c000027e5315ea3bffcac7200000007000003550959de0081000002000000868367250200009700000102000000000000"], 0xaf2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x107, 0x3f, 0x0, 0x27, 0x9f, 0x1000, 0x25c, 0x5}, "9bcc7f6898c96496363dc715", ['\x00', '\x00', '\x00']}, 0x32c) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000180)={0x0, 0x4, 0x7}) close(r0) execveat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x400) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 12:08:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000001000)={0x0, 0x89, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000001000ba4af3c4adb9cce0f95ab433e73a1786bfac3ab01779ddc427f052793950ece182b02018e5d5556769b1fc89f92f3a1f42e56b7b1606d6915d729f7c78111e9b0dde14ccd737ed9e0", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4006, 0x0, 0x81f, 0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0x777c9bad}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup3(r0, r2, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000001c0)=0x5) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = fcntl$dupfd(r6, 0x0, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x48004}, 0x20000001) [ 1878.324949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.337760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1878.342015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.347987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:08:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x1ff, 0x1f, 0x0, 0x4000004}, 0x0, 0xe, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1878.377469] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1878.422935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.423988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.425243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:39 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:08:39 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x8e1cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="300000001e00210c00a900"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB=')\x00\x00 ', @ANYRES16, @ANYBLOB="280026bd704a826946", @ANYRES32=r3, @ANYRES16], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:08:39 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x8004000000000000) unshare(0x48020200) 12:08:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:39 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/anycast6\x00') io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[r2, r0, r4], 0x3) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1590, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:39 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:08:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x40806685) [ 1894.602864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1894.631530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1894.662929] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1894.698588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.709911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.719052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.721025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.723662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1894.749026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1894.782868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.784498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:08:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000571f00000000000039e34ae76d701600f42404da3cd9954bd692b5c2b5a999cc18f1fbac1c5ac30b7da71209eb44d886c5662f29af221040a6cf1e3a7c1e033d5869c4764bb4744f76bd6d725b54ce9741424ec9ff3f1f56d0a0792805ec531bede16f3497ca824a146840f18b131c5c6f296c5e7d16854ae5735e1c6fcdd98b5e3d7783337e0d99f529b8246d9ce7a2142c6bb16d5998da08af0c98fc195c496c574502c7f7987886c6fa2ce9cf0fce8c576d68d02c3b9549cdce488285ea90094c3218", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = fsopen(&(0x7f0000000040)='vfat\x00', 0x0) sendfile(r1, r0, &(0x7f0000000140)=0x4, 0x1f) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1894.788847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1894.793678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:08:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6609) 12:08:40 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x102) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:40 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1894.887519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1894.889308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1894.891999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:40 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001500), 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, r7, 0x100) statx(r0, &(0x7f0000001540)='./file0\x00', 0x400, 0x10, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84098, &(0x7f0000001740)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x9}}, {@noextend}, {@posixacl}, {@posixacl}, {@access_any}], [{@subj_type={'subj_type', 0x3d, '^.'}}, {@uid_eq={'uid', 0x3d, r6}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@seclabel}]}}) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x1348, 0x39, 0x20, 0x70bd2a, 0x25dfdbfb, {0x13}, [@generic="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", @nested={0x333, 0x8, 0x0, 0x1, [@generic="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", @generic="5e715b494291f6626ffb575f95303372f3a25b87f049f8e0afb4c8d3a34ccbb4dd035530e6cd99bc231ef4a54a24f3800d50255531093c000d90aa4ac7d600b38ac8bc8c56fd274b847e22785312a454f06073847d42be79128f0a128980f47ca6b1002e7428f865d9ee", @generic="ea2d1d7b2ad623eeebc42e6d3f526b726f6e7e58fa1e87d0378bd127d2e95025a8e399712ba087f5550d19105894bf3ffb6b7ed3f7c238c382633d6c2e955955be2cc210396e206dd461b8dda75e27b242ad005cd446a30565aff2894460fd3afe1308a2599cfa3e82bb121b0176b1c177504644d9bcd8574a42c42282e101f4f52e452199715948b765c1aff8b16f4685e4deeef0a87ca6d5e9ed315eed6122644c172a1ee53bcdf8a20e4814a46529d0c4476c78e8acaf914ceeb6b522ae44f9d4a64eec21df3156340117e7ba143c96d6", @typed={0x5, 0x78, 0x0, 0x0, @str='\x00'}, @generic="9526739790e6316e81521590777bfbc819023980472d873da41adfafc90da9d93ab2e23972bb6e32c9a2aa8cbfc8608eac7868d648422c89cc5cd7e9797a34f81609eecc16f9ebb123e02fb9c477dfa2ac190c409fc71af42cf36af183e1e37a8eae715fd367e8010ad2b7c21ebe2313bb1535e61f5261637f26cb629b1524c2db257ff378abb8647c344195b7ee64f3e43059ed", @typed={0x58, 0x29, 0x0, 0x0, @binary="6d9189754ac0510bd74ae65a23731424302db457d180379fa82084993b2b858ad664870dae6e64423f2b472b4076311848b2ae56010438abfe70389680d0c0254950f6feefd77595d9f29c4dbfe759f34416c347"}]}]}, 0x1348}, 0x1, 0x0, 0x0, 0x4020090}, 0x40008c1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@nodevmap}, {@version_9p2000}, {@access_client}, {@nodevmap}, {@version_u}], [{@uid_eq}, {@subj_user={'subj_user', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}, {@subj_role={'subj_role', 0x3d, '\\,^#[^'}}]}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x14, 0x80}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000}, 0x0, 0xf, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4, 0xda}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @md5sig={0x13, 0x12, "c481afb4b5239c576ed53b2d20550e10"}, @exp_smc={0xfe, 0x6}, @eol, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @window={0x3, 0x3, 0xcf}, @exp_fastopen={0xfe, 0x6, 0xf989, "f2d3"}, @eol, @eol]}}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1895.060551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:40 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 1895.085544] loop6: detected capacity change from 0 to 135266304 12:08:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x1480, 0x0, 0x1f, 0x0, 0x4000004, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1895.129179] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1895.260495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.262148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.263891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x80086601) [ 1895.291828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:08:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:40 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x8cffffff00000000) unshare(0x48020200) 12:08:40 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010000001800000016c5ff5a67dd6f6eef8ffd16fd28c26df97eecf9f40b0486dbf90b5685bdf5b2b83eb5e7e624ac89ec7c72379522e6b3ab0036cab134c26b8ecfa033fc6ed631d57bafd6f9ba9d6c402686a4cd4d9f3fd35a510e50cd6b6261b32582d075dff0c7bc5e5284efac72024cb3195e2b78dbc4436b7b8190c21181d65c", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 12:08:40 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) recvmmsg$unix(r0, &(0x7f0000000540)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/173, 0xad}], 0x2, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{0x0, 0xffffffffffffff42, &(0x7f0000000500)=[{&(0x7f0000000440)=""/184, 0xb8}], 0x1}}], 0x2, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:08:40 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1895.482626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1895.535025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:08:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x7, 0x8, 0x3ff, 0x4, 0x81}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x2}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000), 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/16, 0x10}, {&(0x7f0000000400)=""/99, 0x63}, {&(0x7f0000000580)=""/235, 0xeb}], 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x20}, 0x40000010) socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000280)='./file0\x00', 0x170) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000040c4048f01000000001cdd1600000100000000000008000000"], 0x38}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12:08:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x80086603) [ 1895.636892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1895.721574] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1895.811894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.813867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1895.818032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:56 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xea, 0x4, 0x0, 0x3, 0x1c1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x2220, 0x3, 0x1f, 0x6, 0x400000c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$inet(0x2, 0x3e61ecc452362c86, 0x7ff) finit_module(r0, &(0x7f0000000200)=',.\x00', 0x1) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000001c0)=0x5) 12:08:56 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xeaffffff00000000) unshare(0x48020200) 12:08:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:08:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:08:56 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/udp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000000)=0xdfffffff, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="460e7ad12a03"}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/22, 0x16}], 0x1, 0x0, 0x80000001) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) 12:08:56 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:08:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x80087601) 12:08:56 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x73}}, './file0\x00'}) [ 1911.595205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:08:56 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r3, &(0x7f0000000240)={0x402200, 0x19, 0x11}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1) finit_module(r0, &(0x7f00000001c0)='!)\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000120000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0) [ 1911.675824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1911.699097] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1911.699624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1911.757401] loop6: detected capacity change from 0 to 135266304 [ 1911.775196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1911.776786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1911.778682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) connect$packet(r0, &(0x7f0000000240)={0x11, 0x1, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e6661740002ff7ce51450008400f801", 0x17, 0x3}, {0x0, 0x0, 0x5}, {&(0x7f00000009c0)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10000) 12:09:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x800c6613) 12:09:14 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0xffffffff00000000) unshare(0x48020200) 12:09:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:09:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) dup3(r0, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:09:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:14 executing program 1: link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r3 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, 0x0, 0x0, 0xfffffffffffffd69, 0x0) r4 = syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, r4, 0x8000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) readv(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/108, 0x6c}], 0x4) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000500)={0x0, 0x7e850000, 0x6, 0x0, 0x0, [{{r1}, 0x800}, {{}, 0x2}, {{r5}, 0x20f}, {{r0}, 0x8}, {{r1}, 0x1ff}, {{r7}, 0xffffbffffffff754}]}) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) [ 1929.034475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1929.040661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:09:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) read(r0, &(0x7f00000001c0)=""/48, 0x30) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1929.114908] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1929.136140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.138176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.147075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x8010661b) [ 1929.235988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:09:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:09:14 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x100080, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '+'}}], [{@seclabel}, {@audit}, {@context={'context', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')\x82)('}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}}]}}) 12:09:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:09:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1929.618738] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1929.642571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:09:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:sound_device_t:s0\x00', 0x24, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:15 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x1) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000540)={{}, {0x2}, 0x40, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="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", 0x1c0, 0x0, &(0x7f0000000380)={0x2, 0xf6, {0x1, 0xc, 0x2b, "6040b61ce64ee632c9d09a52655b4e77820af46c9330add47043efd4f94281fb8caef3402ce16850d31980", 0xbe, "50aa33a59e4501016621bea599ec95c8d652f96dfee0c4c231d9f53539e3618d8c1b4e123bd20437cf5057b083131ae6728999a9472c3a60ab49874b519e766e7e9dfcbe2b89d9ee98d8499190fccc5eb5ed786c34dff549bef90066f257d654d8bd207276d3265b2551edb854108e462203bf7452541f63613c239b870c164550e33654180114ef47fab5a858785ed542a6f75cff2b14e9b77762d0295492ad79f8ea7a076e3939618b15e21c1af108a5fcb8f5e508415f1ebdaf395290"}, 0xbd, "3bf92bba11c66e6c5a03e94f9d8be47943234f3bb16ca70ea38d04f8198faa46690480f7e8263eec880d005464de73d678e1c5059db4390d7c67b42b445bc7778deadb2c4b9e6beb84d877cdc8ee266fdaa1cdaca1acfe339656bb758ba5a2d0d2f38c660a84638f40c094c3b2787fa6e568d956ac4b3abf64a593c391515642a9e6320e4c44d437c18432fa25cf5f3aedd0277761f3f5b7c8ae869ef232fc5abffb0ef692b43f082bb205611adaa931c47dfdf097d67705e26d9af5c8"}, 0x1bf}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) socket$unix(0x1, 0x5, 0x0) [ 1929.732926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.734538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.736184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1929.845067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.890410] audit: type=1400 audit(1744718955.233:19): avc: denied { relabelto } for pid=22992 comm="syz-executor.6" name="RAW" dev="sockfs" ino=50267 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sound_device_t:s0 tclass=rawip_socket permissive=1 [ 1929.963644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1934.744282] Bluetooth: hci1: command 0x0409 tx timeout [ 1936.792988] Bluetooth: hci1: command 0x041b tx timeout [ 1938.840296] Bluetooth: hci1: command 0x040f tx timeout [ 1940.183772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.185527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.189394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1940.249677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1940.251451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1940.254123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1940.539037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1940.890309] Bluetooth: hci1: command 0x0419 tx timeout 12:09:48 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000040)=0x68) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x801c581f) 12:09:48 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:09:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:09:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:09:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff80000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40040}, 0x24010041) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:48 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="faff49bf9cdf293935ca95902361ffffffffff0f"]) r0 = socket$unix(0x1, 0x5, 0x0) read(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x29, 0x5, 0x0, 0x7, 0x0, 0x5, 0x10000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x6, 0xde}, 0x51040, 0x1, 0x80000000, 0x0, 0x2, 0x1, 0x2, 0x0, 0xfffffff9, 0x0, 0x80}, 0x0, 0x5, r1, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:09:48 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1962.886583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1962.909032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.934002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.935723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.966983] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:09:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0045878) [ 1962.983057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1962.984717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1962.985166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1962.989807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:48 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/packet\x00') pread64(r1, &(0x7f0000000240)=""/83, 0x53, 0x38) r2 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) close_range(r4, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000580)={{}, {0x9}, 0x111, 0x0, 0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="821d9e", 0x3, 0x0, &(0x7f0000000400)={0x2, 0x100, {0x0, 0xc, 0x32, "be30bd60ceb1fe126eaa8a0649dabe0d5f56f2657e031a89849a68616dfc5c0024b76559cdabed8faf79bc9db828b1ce0c94", 0xc1, "f7edf422404d2aa7243a0a5e83cea86871c42277d1ca80c65ea668bc077727a8921531b3adb49bfeced2f759ed86e4a9090be41f89fc4b8699bb37d803e028f9c38e9b1b88bef808d36afc110b7a1d5fd3a1b18ddddcb3311c1aa1718d7182514db0b44ef2b68a0fd610e3da0455da2cde7df120d9fb43468121f13c8ea54f60d8ffa523db1ff047fb205e6b044982eb64fd96e2fe5b98e0d73816b97372fc19805f0485f5e55cf2620139eab3bb0631d75af7e44ca7791037ca17816788488263"}, 0x50, "fe85ed274dbfa1889b5331028b4a24af552da9230d0db7c9062774c282508dbbe139509be029dec8e4ecb5ee2f482c5caebe69795a9abff5f2827ed714e6165ca67fa8daba9ee7f7e4dc05a15eed830a"}, 0x15c}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:48 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:09:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000001c0)={0x3, 0x5, 0x1, 0x0, 0x0, [{{r1}, 0x4}]}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:09:48 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:09:48 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000005594c609b3a54e64a4b94ca4bc048ac903659d5349e160b738c80983a24c40f62ae0acbab9d73791a83a4fd5cc8e01e4edc9940900ff9f8969e8d4c878fce4b7f452983390bb8a1be64bb263dc30d2d4f93884c0cb6f5ad34a0dfa6b97b575dc10ad9e56f82ef9c29996c4b5d491b3fe3273baff8669519c63b82c1410010dc22cfb2413a8499eb8caea805a8432f723bfa03af9c3b063f109a643a656d08a1e", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) dup3(r1, r4, 0x80000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r3, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000002800000229bd7000fcdbdf25090000003d000080bdcaf03a6f570189625e5acab72bd1be3e4fed414184617aab53b2cd5a0aacb906e7e2190c54b8b6aedb6c48dbf04ab831af3c44dfed000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004040}, 0xc040) [ 1963.265744] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:09:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0045878) 12:09:48 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 1963.328536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:09:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f0000000240)=0x5) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x7, 0x6003, @fd_index=0x1, 0x7, &(0x7f0000000280)=""/191, 0xbf}, 0x6) fcntl$setown(r4, 0x8, r5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0xd, 0xffffffffffffffff, {r3}}, './file0\x00'}) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1963.355476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1963.357249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1963.364009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1963.409015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1963.516767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xff}, 0x0, 0x0, 0x1f, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:05 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:10:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:10:05 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:10:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0046686) 12:10:05 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0169e7ffffffffffffff050066ac1284c3d64bd49cea7dba88ae7b76d2feaaec57da4694fd181810d392a05a83d0ecbaa106b8d627b99f42b77e2e760fd657ff56b98ff74704e1d9a946e633ef095e167cf8e9055d044c7c7dcd0afc3cbef92440c74fd4e8d327824358692ebfebabf1f1d53ef977a3b37ce36c16894d26081f569f65b4911d7cbc40e91aa1540997", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:05 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) open_by_handle_at(r5, &(0x7f0000000100)=@ceph_nfs_confh={0x10, 0x2, {0x969, 0x1ff}}, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f00000015c0)={0x8c, r7, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x55}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001580)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001540)={&(0x7f0000000480)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000500)="513cc694aa19470c6b764bbb40ab96df43bc4e62666afe05eed4a0cba8851da1fc2ab374c2fde83cf577ee9efa8b7ee209f6f8997f8392b61da6477d9f6026a32ef5c35c5f2f", 0x46}, {&(0x7f0000001000)="389b9e34938600456bd3b0692122a7fd2cd7071972d0c46b624f94d1e493ee5bb7c4486e0f2102ba131c9c3f19a3a23b311f96b6d2786139c02edb933a9153f238c90ce37d2e84ce60d330001f8322af0c35c5858fa50e48ee6a5286bd75e10a1c7d773ffdfbf6b4e85779552df97d1b120bc4c7bd9cf25c1b584e3aa326", 0x7e}, {&(0x7f0000001080)="552c7415e58fc9f2086ad93709c54c91cb53872b5a946e2b7eef49ec64e60666864cb1c1ae06b6af5f6dd794cddf3888219bb101d32815a80a552355c6e0ef4cc775e7136fb7c3441754c2c7d3f29e9533961ec70165997cc9d268f6ce02f76efb39422463a6562698dea3cbe21ce1c821526e893262", 0x76}, {&(0x7f0000001100)="92b833487e2a08bd0541167e115beb1f29febe0d8d85f090c8633d7e560790abb5c4fa3a9fe2bead69ba384b76440220a6dd7e493c4d489b136a083415db10f07a5e54622c995747f8218460fd258ff7cb50045a517dddc1676e2f768067d617281437abcc0fe49a07a8ed5b6f5065da78c992ad6bdcc8c461238794d5fe7158072c48ae", 0x84}, {&(0x7f00000011c0)="b07a001b6b99c7475f87661311cad9b04bcef556de8881286034888b33003a7e17b85e331e6c1fc5f3d3c2231bd299f78acdeb1d4bc628f8407057e23805b12028dd32079453b7c51ae58d3678d66122c1fa09e0f4b480920daa61767aa41a33221bc26ac8fb369eac239d2452ec7b201865e9e88f9606ffceb92a9b71e546543cd3a8b58f4420822137e27aacb9a95b1d6d61235dcf4d217fca4245cb7803d0abd174fa1cc11255f2111fc2ff2973838a56eed8da47a0f777e2a3c5ba3fb43ce7959fe9eb3e0bd3a96ffef10a7fd2e0d5e65847288ff2e8eb57faade5d989197bf5fbf430", 0xe5}, {&(0x7f00000012c0)="86814a37dea8f8e7ebb37978b2c6d2a0f9ab5d5d800922a1103370458a4fe81b0d9721d0eae9b62f7c664d797da559f523f2c2f8660403a3bd2f", 0x3a}, {&(0x7f0000001300)}, {&(0x7f0000001340)="5861530cade20c6f449d480342675b89187a90370525ef166fcacae61300ae8071969e515f5317bce5f09acffaf16f10135489b4ff3b4db64f360fee6fbda788fde6e16b3bc736e587a9461cff3627b58df51002", 0x54}], 0x8, &(0x7f0000001440)=[{0x100, 0x9, 0x1c000, "edd57bdda5ec2bd7458da95a9b0670d10481d1db2113657542921638690e3667c998765fb63ddb285a08eec5f7976ebccd7a517f306d39d61aae86e29c07d58e551ed24ba0ae8f6662a3467035888fe617fdd659837a1212ea15073a6ac91ae2df32794a374c97f04a7b85d6c167a650a6ebc5eef6c8f346d629a799ce51bdb57b3ba45a655fd9956cec83fc8441fd279debad76a23451c173f71c49e4e1c40a2b5ec2a44282017d6d99ffd8bdc7a677ec8ba37392cc3502e10d3ea2e2edb47793515fbc127107879ede4cd56f39c737e50b0668c139cf977a679a7fd9eb9884448ced77f1e508bd8571156b76454e9e"}], 0x100}, 0x0, 0x20040000}, 0x3) unshare(0x48020200) 12:10:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1980.024565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.036818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:10:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1980.063854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.085178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:05 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000007000000040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x4004c1, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1980.093602] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1980.108948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.156058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.157803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.162082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0096616) 12:10:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000040)={0x51a}) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:05 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1980.475634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1980.526602] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1980.564174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.565747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.567463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:10:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000100000000002e2f66696c653000"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000718000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000001e00)={0x0, 0x2, 0x4}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000002200)={0x0, 0x2800000000000, @start={r3, 0x3, "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", "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"}, [0x2, 0x6, 0x1f, 0x5, 0x1, 0x9, 0x5, 0x0, 0x9, 0x1, 0x3ff, 0x0, 0xffffffffffff8001, 0xffffffffffffff01, 0xe1, 0x100000000, 0x7, 0x711f, 0x400, 0x8000, 0x7, 0x2, 0x1, 0x1ff, 0x1, 0x9, 0x8001, 0xb8, 0x6, 0x2, 0x10001, 0x0, 0xfffffffffffeffff, 0x9, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x8001, 0x7f, 0x1, 0x0, 0xffff, 0x800, 0x2, 0x34, 0x3, 0x8, 0x1, 0x1, 0x2, 0x100, 0x100000001, 0xf, 0xffff, 0x2, 0x4, 0x7fffffff, 0x1, 0x9, 0xfffffffffffff801, 0x8, 0x21]}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r5, &(0x7f00000001c0)={0x40000019}) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:10:23 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4090, 0xffa}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x29, 0x80, 0x1, 0x4, 0x12, @dev={0xfe, 0x80, '\x00', 0x43}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x8000, 0x400, 0x5}}) r2 = io_uring_setup(0x259b, &(0x7f0000000200)={0x0, 0x759, 0x20, 0x200, 0x372}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x50, r2, 0x10000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x7fffffff}}, 0x0, 0x0, 0x33, 0x0, "4fb2386f65a856b6930930052d7d4e52fc4032fe98f268baabdf34269819ec36e44c87f906b59567acb1dd5aa5ba7be8ecc7069f172fddc076e97b1bb7ad34493270d4dbba4a2ca52cc13ca18e08c805"}, 0xd8) getpeername$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000001240)=""/82, 0x52}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000340)=0x7, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 12:10:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:10:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0185879) 12:10:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_setup(0x338f, &(0x7f0000000140)={0x0, 0xf721, 0x0, 0x0, 0x353, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_NOP={0x0, 0x2}, 0x6) 12:10:24 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) pwrite64(r2, &(0x7f00000001c0)="5ef603ce6517e47fe5133c698b20a9bb20dcf5d3fe5dba061f8f7e907d0982c8a478a7d1a4b35af0653d6a4633c6e1603e8e47c583fee7e8d8dbaea52e7e9ea86ec9368b9eb52e845f88abc1b75cc15972ce9f827da9c8d067689a61463d6a11911ff778e58aebe7e91fcce4a8149519871e51c4bac0a79a3ffb720c98af1d7616e7d914e9af87e0f1ef5b3fa57e5b9a197c41cc", 0x94, 0x82c2) socket$unix(0x1, 0x5, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x1b1800, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 1998.716860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1998.724632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1998.750842] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1998.751652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1998.767739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.769450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.776480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1998.824087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:24 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:10:24 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r0, r3, r4, r5], 0x4) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000004d60000001800dd1e", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10002, 0x54) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5e, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0189436) 12:10:24 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsmount(r1, 0x1, 0x71) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x10000004}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 1999.026471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1999.041858] audit: type=1400 audit(1744719024.384:20): avc: denied { write } for pid=23592 comm="syz-executor.6" name="task" dev="proc" ino=50853 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 1999.047102] audit: type=1400 audit(1744719024.390:21): avc: denied { add_name } for pid=23592 comm="syz-executor.6" name="23595" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 1999.070053] audit: type=1400 audit(1744719024.391:22): avc: denied { create } for pid=23592 comm="syz-executor.6" name="23595" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:kernel_t:s0 tclass=file permissive=1 [ 1999.107668] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:10:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:10:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) fallocate(r0, 0x2, 0xfffffffffffffffb, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bind$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) openat(r0, &(0x7f0000000040)='./file0\x00', 0x8801, 0x81) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x5e, 0x10305, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200007f, 0x50}, 0x2253, 0x0, 0x1f, 0x0, 0x4004005, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1999.152245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.153376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.154541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:24 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000001b00002e2fd4ed5f3464b8fa27479166696c653000"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) listen(r5, 0xd019) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x972, 0x5}, 0x0, 0x0, 0x23, 0x6, 0xfa9, 0x0, 0x10, 0x0, 0x45}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xe) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x240202, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc020660b) 12:10:24 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 1999.315147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1999.480874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:10:24 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = signalfd4(r0, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x200, 0xffffffffffffffff, &(0x7f00000001c0)="eb5c6ea6501429924611f74e71ab924c49afb7be7b5eb6b3573298ad38eba050d519d409e5aa2005b339ffbdbe1c12eae724a62e17f1ed500b2abf8e83d98227d2f7ad609a0bbd7400ea58d6ceaa3f0448bd736433962947644de0d7c60f333e9eb2fe85da3b2ca14d0128d83c", 0x6d, 0xfffffffffffffffa, 0x0, 0x6, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f00000002c0)="160674", 0x3, 0x0, 0x0, 0x0, r3}]) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:24 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000000c0)) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xffffffffffffffff}, 0x0, 0x800000000000, 0xffffffffffffffff, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="f30e10fdae1000000000000000002e2ff9e02fb7cebc3018b4f24003c4b3c2d3b848a7d628ca27f834e6e9166f4e9154573891495bd095066df2c7b681d74683f6aa"]) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1f, 0xff, 0x80, 0x0, 0x0, 0x8001, 0x400, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x4}, 0x6a2, 0x66d1, 0xffffffff, 0x4, 0x7, 0x100, 0x6, 0x0, 0x9, 0x0, 0x2ba6}, 0xffffffffffffffff, 0xb, r3, 0x8) 12:10:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x44400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 1999.544914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc020662a) [ 1999.558866] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1999.561187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1999.585892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1999.586907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1999.589812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:25 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1999.746171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:10:41 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000518000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000280)={0xa}) 12:10:41 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:10:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:10:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000140)={r2, 0x9, 0x0, [0x0, 0x1, 0x9, 0xff, 0x7ff], [0x3, 0x7fffffff, 0x800, 0x8ba2, 0x1, 0x9, 0x9, 0x9, 0x5, 0x6, 0x6, 0x7, 0x3, 0x72, 0x4, 0x8, 0x1ff, 0x4, 0x4, 0x4, 0x4, 0x5, 0x7, 0x1000, 0x7, 0x2, 0x2894, 0x1, 0x100000000, 0x74680e21, 0x8a07, 0x40000, 0x0, 0x40, 0x3, 0x10001, 0x81, 0x7, 0x2, 0x8, 0x100000000, 0x4, 0x1, 0x8, 0x2, 0x9, 0x0, 0x400, 0xfffffffffffffffb, 0x6, 0x8001, 0x8001, 0xfff, 0x3e2, 0x502d, 0x0, 0xfffffffffffffff7, 0x4, 0x8001, 0x1000, 0xc0d1, 0x9, 0x20, 0x6f4f7e97, 0x9, 0x6, 0x8, 0x9, 0x4, 0x80, 0x4, 0x3ff, 0x71, 0x8b01, 0xab, 0x6, 0x80, 0x7, 0x9, 0x3, 0x5, 0x89c, 0x1af3, 0x7f, 0x46e, 0xffffffff, 0x1, 0x1, 0x7f, 0xfff, 0x9c37, 0xfffffffffffffab0, 0x81, 0x1, 0x200, 0x6, 0x1, 0x5, 0x61, 0x8000, 0x200, 0x7, 0x40, 0x1ff, 0x9, 0xc19, 0x54107204, 0x6, 0x3f, 0x9, 0x100000001, 0x0, 0x10001, 0x1, 0x5, 0x3, 0x5, 0x3ff, 0x84, 0x6, 0x1000]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:10:41 executing program 1: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/fscreate\x00', 0x2, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/194, 0xc2}], 0x100000000000001d) 12:10:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc028660f) 12:10:41 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001000)=ANY=[@ANYBLOB="01000700defabc4718fe00001605a50f828d0b252996f6b7d4df2b4e0d45b987c814072bd8272b963071a155e1bbe3491fcb4b9d76c32270b2a0be180b8ad88a7fd86450f578ce979c57e02938008fbe1b3ddbd47ecc5f4e5e9c85a490", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) sendmsg$nl_generic(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x400c010}, 0x40084) 12:10:41 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2016.288675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2016.299864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.322155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.329566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2016.362407] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2016.472027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.473683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2016.475749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2021.400252] Bluetooth: hci1: command 0x0409 tx timeout [ 2023.448298] Bluetooth: hci1: command 0x041b tx timeout [ 2025.496382] Bluetooth: hci1: command 0x040f tx timeout [ 2026.551099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.552919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.559066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2026.600047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.601788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.604258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2026.779108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2027.545111] Bluetooth: hci1: command 0x0419 tx timeout 12:11:10 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="210000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) fallocate(0xffffffffffffffff, 0x5c, 0x3, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0xeff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x208041, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:11:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:11:10 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:11:10 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) socket$nl_sock_diag(0x10, 0x3, 0x4) getgroups(0x4, &(0x7f0000001b80)=[r1, r1, r1, r1]) sendmsg$unix(r0, &(0x7f0000001c40)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000340)="97d426af373c71afafd99b9946900b0535152d714cfd9555f2b0975473f0c465af60a98922", 0x25}, {&(0x7f0000001900)="e2cdf6db908f5c82f1d4da5f82c5a1612e782434cae194e0162ea7460a9b402d8e8b83ba25feb9bdeafc603b84183992e99c05eee8fe11eaa87c77755b05512363eb25ff515768f554fde99511d198278835bb18209c9ab0d467a8f279cbe583dd659a96383d636d75fea726cda3535c42e23b55e39f61dc0d761043805f01d96dfef01cf428ef69f007247c290940b23add9d8d8573dfcfb5f66fd6c301ae6b44c76c4c9b7f3492fa826f8783fb954a309d3d9813143c2efeb084e4446a866585719ca5c176fa4fe536c2e8c12b065f91cd7e", 0xd3}, {&(0x7f0000000400)="51bbc84101e438f68960c79b98d3d13121b20bf7938d5e42f17a040f6b36627ac980e8b55c3cf3d7cac5c61e24b4f3e6a5217bb86cb5696114faf173d26e6cb7b865919eb71f1d95d4d4bc7662b8af172473d33214c07b85e1e90b30376d354a8a44ce85c65833ede1d258c7061a0a786951c3ba4fb5e3cef15bd543e4610084f10683339166578be708f87d32d6accca38c57e1b9f2ca150db7ebb30761", 0x9e}, {&(0x7f00000014c0)="78d6a9d318af547e7873a82d58492612af811f2126125cd99f5e14faf7968ced01022d8369b1ba16451d4790e17d8087c843f035987cb6c63cdf079b44c4cdc5a148c6d9e31afce8695f063f01faf4c1f2cd9b194a9698b6c7e4d47cf4c54b297a6879a5413f4c4d8afeab979de97364cf9c3c80d6fe519582406b5c7a826cfd1b1b30f994cc4e3d6dc391a27ee4f06e856783da3aa6327a5eca693e992cebe13b8244fa8e17cb502f101264f8bc79f58713c8c171b8844c63dc", 0xba}, {&(0x7f0000001640)="a30e7e62812305cb182449b165a399e65eb39e1016a968cbd0b471ead6ab8712da5f27dd9fcb8fc9e5ff82c32c7296a314542c92889fb16192bb226cc9d9c5192adfbc74f01de298116fb817920848ed24e5f0e631d8cacf75e802ad2edd3feb54e7405a475ab90a72bb005c4e6edc36e311e8cb015a8fbecb66d9614a6a67ea17149f90d07e05cb11594046ac0417", 0x8f}, {&(0x7f0000001580)="d57928d54a6a191ecb35e73d460552e7", 0x10}, {&(0x7f0000001700)="da39a1b29bf50d704c75bcb68e3bb4457880f031618492397061407da982dae2857170f001e3f4e4e5cd14e4ac79a32240c8ceba7c8579df73407b197d37fe916db9ef67187e77f31f5cef30815fd200e8f35b38a1eee4ab042194960d35bdc8", 0x60}, {&(0x7f0000001780)="6741e514fe74e009c1c4c18a5a14b0630d0a9e4dc1d1d9fc60273487c573e55ca39b793808fb607bf97f80a3950b81f92bf9fa7337ffe1025acdbabe313fbfcef7678fdee22c9174304f538fa705dd5d1ef259c348ca757d38ae2abf6cf830fdbd56bb5a7534f74964be380414960f9cd96416d69f32d0dcbad4176bff92c0e749b26fd1df7d4114b6baa1f6718a70cfe01e112bfab365d69faf89ab23fceef9be97963fde1495902c649791cf82014bfd8b3b54226b430c48a4903ee1c8e232aa48a6a2d9ca52dfc10572c6ca171eee27b63dc3fb7f2992e2aa4ec169fc24e2caa3e5e5801e743a70db6f049aaab84f881edf634b7014213a", 0xf9}], 0x8, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r4}}}], 0x70, 0x20000851}, 0x44081) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, r7, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r6, r1}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:11:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0406618) 12:11:10 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:11:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:11:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="bbea705e62352e851aaa112baee5c86f080000000000000099eb883e2f62696c3000"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2045.269694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2045.297870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2045.327762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2045.334141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:11:10 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) clone3(&(0x7f0000000440)={0x20000000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240), {0x12}, &(0x7f0000000280)=""/92, 0x5c, &(0x7f0000000300)=""/204, &(0x7f0000000400)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'wlan0\x00'}) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) ppoll(&(0x7f0000000500)=[{0xffffffffffffffff, 0x20}, {r2, 0x400}, {r3}, {r0, 0x80}, {r0, 0x177a}, {r4, 0x1}, {r0, 0x100}], 0x7, &(0x7f0000000540)={r5, r6+60000000}, &(0x7f0000001000)={[0x1f]}, 0x8) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40, 0x0, 0x1f, 0x4, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2045.367673] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2045.440927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:11:10 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = socket$inet(0x2, 0x80000, 0x7fffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) poll(&(0x7f0000000040)=[{r2, 0x22d0}, {r0, 0x6}, {r5, 0xa0a8}], 0x3, 0x800) [ 2045.466742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2045.468373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2045.470821] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0406619) 12:11:10 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:11:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:11:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:11:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="a24400000100000018000000", @ANYRES32, @ANYBLOB="08004963c7400ae74ec5fd0e00002e2f664d6c653000"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x408200, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x401, 0x30, [0x5, 0x1, 0x7f, 0x2], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10) [ 2045.769938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2045.839156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2045.866077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:11:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0506617) [ 2045.921189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2045.922785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2045.945771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2045.965909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:11:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101002, 0x0) r2 = memfd_create(&(0x7f0000000180)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x4) dup3(r1, r2, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@fuse_with_parent={0x18, 0x82, {{0x7fff, 0x890, 0x1ff}, {0x6, 0x9, 0x20}}}, 0x400) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:11:11 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:11:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc080661a) 12:11:11 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0xd59fce93121784aa, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000100)={0x10001, 0x1}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10412, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2046.156598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2046.273544] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2046.341523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2046.343077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2046.345197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2050.968347] Bluetooth: hci4: command 0x0409 tx timeout [ 2053.016387] Bluetooth: hci4: command 0x041b tx timeout [ 2055.064289] Bluetooth: hci4: command 0x040f tx timeout [ 2056.414676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.416912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.443387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2056.511529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2056.513390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2056.516254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2056.693121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2056.709571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2057.112272] Bluetooth: hci4: command 0x0419 tx timeout 12:11:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:11:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0c0583b) 12:11:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:11:38 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0x0}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000001880)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000018c0)=0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r6, r7, 0x100) r8 = socket(0x28, 0x800, 0x1f) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000001900)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001940)=0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r11, r12, 0x100) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f00000013c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000001440)="bc5a2b3a834b7805c7cb85975365486905441fa153cbe772d3ebd9ce4532d516fffdb2e19ba58f68104a99de3d9bd71ebb55d0ad708b172c6a28a91b96a1469df098940f50156f91af6deb60447485573fdd038c2c19cab36cfd90f56c12cfe8c241116447e735b425ea55800a3ba6939f1069b6eebbce6610da4336883f17b5e9e2a3174ae820d813f34fe0bc151a71eccd", 0x92}, {&(0x7f0000001500)="3ad445d5865fce8d323de33591dee4ca74ca342ff06a2510e27af310a876be52a469f0f4a7fc861d5945faac8958e735a68b534aa35cf0049fe198d7fef167a90ed51988cd4b", 0x46}, {&(0x7f0000001580)="951587f83e967946d0a8595d2e7277f11ff80fe56f87a58852a4aaa79641a9fa157a54f1db4caa83192000a826f06726138d729237ddf94121f51c6c14523080456be86282a7c7d72f6454584ce639acabcb5e2f9845fa53aaf4cf4edf998b27f2c38eea8fa2464760989e4e50360ef384529b87b81776142d9a41b899e0794d3cb38980725d5feb60bc7163b693b113a22737da78550101bcdda6fe9f23da813beb7e56466d2558ebbb50ed071c913e49b18d112d07942aaf7f1616172ec3a05100dc0078", 0xc5}, {&(0x7f0000001680)="4f930b8a7972e08bf9637d85b113b0495353a3e434265218e3f3f08af3eec497d69bac87b2ae7e929fc347f6fc23506865298eea7f5d9ff255ee1837a3dea46938dd0c5209f9f48af7b15c5e549264a3de7a2966e81fce7deeced9e1a214d13bc32222425499641ff106c7af66d961700cfc8b6739b92897cd7f74e833262d13ac5a3a5c6ea204251b953b5bda9b63cffbf7489b0c53d7a77c23edc687643ce8924c3875", 0xa4}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r2}}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r2}}}, @rights={{0x18, 0x1, 0x1, [r8, r9]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r13}}}], 0x90, 0x841}, 0x0) r14 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r14, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:11:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:11:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) fsmount(r2, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$int_out(r5, 0x0, &(0x7f0000000200)) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:11:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:11:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="0100cdfafbffad0e18004be9", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c8, 0x19, 0x100, 0x70bd28, 0x25dfdbfd, {0x18}, [@typed={0xb1, 0x91, 0x0, 0x0, @binary="2a8718194d80bb4a2d221d07d70fbbe7ba5b5c74a4cbd2322ccd386e52168b12bf20295491cc0f50db4a5fec36ff43476886f96db096582f300813a40e30e7c75e8073fd936e72b0e9600fe94246f68c39f34926dea77d54ff3d87f6378798867119e63ba12e8fb3bea7a22fac02b50d7fc1f7ce8943f4bba6a75742dfd67169cbdee48fe3a8347cba0da0ad585d5bfa687cb5b5f0ed1f3a26d3533c7a10df65818472db1f19020ead4c86b246"}, @nested={0x8, 0x6a, 0x0, 0x1, [@typed={0x4, 0x86}]}, @generic="3cea8a7b981ef4d90ceca4ec53bba7161ffc4010eaf01565c1dba82f7a45e5dc48d516ebca2429a308eabc3da36dc84a74b3b12c69f55fcb8514589093a607ece7182bff7150615d9261b4a973d863d1c98f71194885b0b613cdcd44cf8e09858910d4e0f06eaac31b31ea6d53cf25c875104b39b61793fd36dbcb7e9eba0e0f0f8978abb424c3a19dc20f3a7ba03d22630777c34140067fa21299f8c7f8c15d4f2d85e924d091cdc4b12f563791a6e4fe2ed8f3c5a5f3328e517591a3beabeb1697153402fde3f5c8f021436b31412af753db05ce7d516f160b06a402c768d63e4433d6c3889f410fe7208f464addd940e0f78e8ccd"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x5940f4f7b38987ae}, 0x44) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x82000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000440)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0xff, 0xd, 0x101, 0xf568}, &(0x7f0000000480)=0x20) [ 2073.262910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.291554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2073.302965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.314172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.358484] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2073.364719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:11:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00', @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x68, 0x0, 0x1f}, 0x0, 0xe, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000001980)=[{{&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/155, 0x9b}, {&(0x7f0000001380)=""/12, 0xc}, {&(0x7f00000013c0)=""/255, 0xff}], 0x8, &(0x7f0000001540)=""/37, 0x25}, 0xc8}, {{&(0x7f0000001580)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/101, 0x65}, {&(0x7f0000001680)=""/86, 0x56}, {&(0x7f0000001700)=""/168, 0xa8}], 0x3, &(0x7f0000001e00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000001800)=@generic, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/86, 0x56}, {&(0x7f0000001900)=""/32, 0x20}], 0x2}, 0xf7}], 0x3, 0x3, &(0x7f0000001a40)={0x77359400}) [ 2073.401937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.404057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.406071] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="f7d8134e41338721cfac0c33caa2bcd8c2533bf5d56ce001f234a2cf73d64409c3dd04fcfe5013ddddfa5f96b375157b8b53fb5cf8a7614da10a7969a0fd671e39efd0c62ddb8bfb021226a949e598561414766fdc0d1dea48eb15ea38f53625193376312f13c78fd2868b0dcd2bfe6f8bf874203f10fd96bebdb6d20ff661ca71e509c0ca2af5df974d48273c21592a63039e50", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x3d}, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0, 0x3d}, 0x0) ioctl$CDROM_LOCKDOOR(0xffffffffffffffff, 0x5329, 0x1) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r10 = accept4$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, 0x65b) 12:11:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000140)) readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x1b8, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdece}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b44}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x44800}, 0x841) 12:11:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:11:38 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001000)={0x448, 0x3f3, 0x200, 0x70bd2b, 0x25dfdbfd, {0x5, 0x1, 0x2b, [0x0, 0x10001, 0x6, 0x2a9a8000, 0x400, 0x8, 0x9, 0x539, 0x0, 0x33a, 0x8, 0x3, 0x2, 0x81, 0x3, 0x1, 0x1b, 0x80000001, 0x0, 0xfff, 0xffffffff, 0x6, 0x2, 0xfffffff9, 0x8, 0x3, 0xffffffff, 0x2d3, 0x2, 0xff, 0xffffffff, 0x7, 0x6, 0x6f, 0x9, 0x2, 0x0, 0x2, 0x6, 0x8001, 0x1, 0xfff, 0x0, 0x3, 0x5, 0xfffffff8, 0x6, 0x101, 0x400, 0xb68, 0x40, 0x401, 0x6, 0x7, 0x3, 0x7fffffff, 0x1646, 0x1000, 0x40, 0x2, 0xf7c, 0x0, 0x2, 0x401], [0x39e7, 0x4, 0xffff, 0x8, 0x2, 0x5, 0x6, 0x8, 0x1, 0x7, 0x6, 0x6, 0x9, 0x7, 0x6, 0x3f, 0x2, 0x9, 0x4, 0x0, 0x1, 0x8, 0x3, 0x0, 0x9, 0x80, 0x100, 0x6, 0x8, 0x7f, 0x1, 0xff, 0x8, 0x9, 0x8, 0x8fd, 0x44a, 0x0, 0x0, 0x7, 0x6, 0x8, 0x80000000, 0x7fff, 0x3f, 0x2, 0xffff365a, 0x8000, 0x7, 0x200, 0x8, 0xffffff45, 0x0, 0x1ff, 0xffffff81, 0x1000, 0x2, 0xffff8001, 0x3, 0x9, 0x0, 0x8, 0x0, 0x8000], [0x7, 0x8, 0x4, 0x0, 0x7fff, 0x4, 0x8, 0x1000, 0x2, 0x8, 0x6, 0x2abe, 0x8, 0x2, 0x8, 0xffffffff, 0xb39, 0x80000001, 0x6, 0x4, 0x8, 0x0, 0x2f, 0x0, 0x7, 0x9, 0x54, 0x2, 0x6, 0xfffffff7, 0x1, 0x4, 0x4, 0xfe, 0x3ff, 0x31e, 0x0, 0x100, 0x3, 0x113, 0xffff6ad1, 0x4, 0x4, 0x0, 0xfc1, 0x10001, 0xfffffff8, 0x4, 0x3, 0x903, 0x8001, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8001, 0x5, 0x800, 0x3ff, 0x7, 0x4, 0x9a, 0x6], [0x2, 0x0, 0xc2c, 0x3, 0xfffffff2, 0x8, 0x7fff, 0xbc5, 0x38fa, 0x0, 0x7fffffff, 0x4, 0x9, 0x5, 0xff, 0x2, 0x800, 0x24b1, 0x4, 0x100, 0x8, 0xbfd, 0x10001, 0x93fa, 0xc1, 0x7f, 0xffffffcb, 0xffffffff, 0x8000, 0x9, 0x2, 0x7, 0xffffff80, 0x1, 0xfffffc00, 0x2b, 0x3, 0x6, 0x6bad, 0x80000001, 0xfffffe00, 0x2, 0xfff, 0x80, 0x1, 0x3a1, 0xfffffffd, 0x4, 0xffff0001, 0x6, 0x9, 0x7fff, 0x9, 0x3d, 0x45, 0xd1c, 0x9, 0xd34, 0x8, 0x6, 0x9, 0xfa, 0x2, 0x7fffffff], 0x25, ['/%@}t@[:&![\x00', '/dev/nvram\x00', '\x00', '&.}\a*\x00', '-]', '\x00', '][-\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 12:11:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2073.685469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:11:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r1, r2+10000000}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) syz_usb_connect$uac1(0x6, 0xa9, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x8, 0x8, "", '9'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x10, 0xf1, {0x7, 0x25, 0x1, 0x0, 0x3, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x81, 0xfffc, 0x3, "2465280f3f"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xd027, 0x6, 0xc, "f5"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x7c5, 0x0, "eb808d7547219f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3f, 0x0, 0x1e, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x2}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x3f, 0x1, 0x1, 0x10}, 0x77, &(0x7f0000000300)={0x5, 0xf, 0x77, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "ced159749032d7452a4b7eaf4e3eb093"}, @generic={0x51, 0x10, 0x2, "be4fff1b691bd291b74c26c422c12b8937fdcf7776431401fe2f78546dbaccb5ab235fc6cc0834a42a57b56dcd1039393d552bec6b330e79c0048b8828d2857e753d446c7d80e8d8f4610465f19b"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x2, 0x1fc}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x816}}, {0x9a, &(0x7f0000000540)=@string={0x9a, 0x3, "40106111abd04bec626b0836fa2f3c2a73830dfff4d191764f24258a1c8253948627d123052deadcf04b87e30193afe6895092808fcd22d0033a8ed93f77b21ad41468e16e90c9dd18233fec51b25f514511f0c74129238dea28ea9f51286ac9546933b4c70cd8dd53b3539af3149dce495c9300060f42c4916401e440c3e4ed2d9474902c8b9d27844177817a220484befd1c3001fe1923"}}]}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2073.769794] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2073.862766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2073.864542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2073.868557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2074.029094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2078.936283] Bluetooth: hci1: command 0x0409 tx timeout [ 2080.984398] Bluetooth: hci1: command 0x041b tx timeout [ 2083.034012] Bluetooth: hci1: command 0x040f tx timeout [ 2084.158163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.160820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.164322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2084.209541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2084.211470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2084.214357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2084.382799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2085.080298] Bluetooth: hci1: command 0x0419 tx timeout 12:12:05 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:12:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x4, 0x1f, 0x0, 0x4200004, 0xbe6, 0xffff}, 0x0, 0xffffffffffffffff, r1, 0xb) openat(r0, &(0x7f0000000040)='./file0\x00', 0x88980, 0x80) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:05 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c6430000a17d6d9f994f133fa640c82d2a033b9c56f5adb53649b453d0ed3e012a595be530f4103316a32582a364c3d0cf8d5bc14ba2e372fd1dd24839d7b7a1fda4881c0f87ce652e00000000000000000000000002f68cbc12cb3d69785d1ed7dc74bcf7d32430508b8a33869905d3e4fe72f412202610ab9d90ecd71da95"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$CDROMPLAYBLK(r6, 0x5317, &(0x7f0000000040)={0x200, 0x5}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5e, 0x8100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0xfffffffd}, 0x0, 0xffffffffffffffff, r3, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:12:05 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:05 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x400040, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x543, 0x7fffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:12:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x3d}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index=0x8, 0xff, 0x79, 0x3, 0x1, 0x0, {0x0, r7}}, 0x1f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:05 executing program 1: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/4096, 0x1000, 0x0, &(0x7f0000000240)=""/41, 0x29}, &(0x7f00000002c0)=0x40) keyctl$restrict_keyring(0x1d, 0xfffffffffffffff8, 0x0, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000bc0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) [ 2100.128639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.171765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2100.182398] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.188926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2100.213870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.215430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.217374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:05 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2100.259886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:05 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$CDROM_SELECT_DISK(r0, 0x5322, 0xe8c) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) shutdown(r0, 0x1) fcntl$dupfd(r4, 0x0, r3) preadv2(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x3, 0x1000, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000300)=0x5) 12:12:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f00000027c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2648, 0x38, 0x2, 0x70bd2c, 0x25dfdbfc, {0x17}, [@generic="3688dfd1a73c557c975d3bdf598948a1a74c6f4cb861002c6860512a32c6b725fa2eb0e398504a49bfab4887fa54f43754c2754c6df075e631ff2b17cc99f3df31dfdc7abda500303a4256327b4a674d079ccd8e67d6237f4431accbc751dfd03eb21057da320a49bceef745c5f17c2c4bf24fb3692617979b423ab2e2e98ee730b02985c62400e7652d3c242c43c63aefbfed5e223932a6b5a71d9ce646c912f7c2521e24b36be643f1d38d71d6fc4c5153179c642120fd7dceabc493b15fde7089d2c3585d504ff4d10158bfffc9aa6fa2c2c1a0b9a186b501", @nested={0x255, 0x91, 0x0, 0x1, [@generic="c18ecaaf707b43ad3f3403809c5d1d61c1fafba771ff5f96c045d57c42e4d2e747f856bddc9b7918e5bd2f9c86ba1ced50bde8798cdec51250ba70fa03a48a1742a67af507cf349b9cb6caa7d08c48b711cc14a85162d7acb36949b5cc9fa9a8e89db44b00735f033ba2494d4dacb33db882b9f49cbb57a516374f1746c571832ee179f3a22f7be91562535f01f53712d6cca34bb93bb03ed6cc1003cb1cdafc12db2e91ccb676c7a395e4ca13a98e4c30d346fffb", @generic="e5f5994f513977b5ee794a02f85e28a229e08728040e44e92e73a34e53c004f50683be0aac424731136e350e3da007e01f3a50eb932e12909fcd116521", @typed={0xc, 0x17, 0x0, 0x0, @u64=0x101}, @generic="0a6e0d3c7a67ca8fb04be15b54d96c32439ed3fedb0a374c5fa64cffd11b84397a37fa68d7584a4c8132d4fd3a1a15dbcbd72afdbef38eeddfbc6be08453cea0dea60721884dd8026166649cc21aa77262aea1193432699e51e0f6932c3cee69a8d2572034fdc8b55323b043c31dc70e16d9d22c1f53ef93341a172f7c15e1eeb7df9b86927dd2845b49da44cc6241a13a5d8110e58d885d1f8c4e94403604320d21d379178aca71f80d2ebde4830fbb83c7c4a78e67334d600e88552e8fa3a432fd351de0a04ed96dbd7baec425", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x7}, @generic="33ceb15960ab6e48ab0a7748f082f06f066a011418f4379087333ea246aaf29caa77d26911491b02be2bf874843e761fe10230605b9f1a3576f33cb4e9c6af687e94f1eb9a402c584adc74f8c365cce318ebc1cc2b30b69b9c7503d655f91adf863b7aecbf5fac307394befa6534e4e6ba", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@private=0xa010100}]}, @generic="f3c2fc343f25153bf31b45c10b11004bbcdc02853db2608c490da3ad7baea6f5f58e659b5eb2e24011aabf79fe5151a97968fef86be22e0e589d9e5571c8ddb16bedea6e7bc3ee7322c0726826440da11ce8beb204d014715bcc1fb60654ab44add4a5daf34944fa8e63cf2f536060aa29ad3bdcd55a212f706ebe4296c3e9cdf6d65cc281369ace345cbe49773dd62ebeb7268554d17eaba265240bd7872f53fa838fe835f9c80be0c637944dc023579c276857a709073fa444cd8dd8c546fdb9decd332788403432cc549a8d581915ffa4840734037ff0dfbbcf84ad029781852a68a2f202eea1cd8f772280ca7d162abc02ef54c76c2be440cdbfb2ae6c2bb84ca29c7b48e027096ee1530ae6f8241077fb776c398ded943e68c6f4e00e3a66d2b8ce5c67b01e7fd8fa8269e78e2b49c32f444266d36a8ee9ac20e062ed13c420da61a60dfb6240c23cf035685b09ed5a569241d2e32271eb76c68bd688d0bfe3f7d48cd7fd34c44b5f54d01d8427598ec25dba8fd0d67861e82a792da52c0d6a4e7639566a07bcf8cbdecfe5572a04fa086ae355afb258feceb756a6fabbb1ce72a94d18780d12d6b285195fdd5de29e28c2e56b16a9ac2fa0a452c86fe87c15a96277e14262271b3745bd690bde83ae4f0001d8e2a1e0a014ffa404a00a98f0138b72361898e5164c57b8eca4dd2c78c71219c56bffeae992364d793e0254a1dce3f18528c7cafe7544b3ef6355f268b421316d347b6835c62c307fdebc89dc5b13622d05b81d4bda043cf8b6633380b13f0ad654707e2c086e1727e2f45f2daae973f3e249a79c507931b741ce841efd5043f20c32f83526d5e9885d4fccea8e96b8560ed73eb6ac82d78b2245adc1693487ec64474168f8db02771379b5bf2a20109ccfe18037dae67bcad61e950c63ba596864c3a45b4d3da7ac96c317ee69832dd1c8d273cb67f4fb634816a37081777a618ad3d9318db8dac4a48b3288791b0b2a65a40d7b5ff305b2739895b8f17ebd9811b3d1e65ece08a63701b5e070d1379ca616fd9eea8c3c7b335fc1be76675df0e1bbfd0a2223dfe73f9e60bc60fc0ce2d14cc5217ddff771d0da29bdf983edf9c4cd0b988c4e09f9ec1c34bf9bdbaa72a16647bcd053844a95de600ee49017e21ee474edcf8706d4793c8e9c22a441f8782200f54f8939943e0cb0621dffb1df1ec689755c02289de3fa1a26bb7899241915a0d98831bbe1ac6ec6c761facf4543a215a67da162e6c588176590c69c380be31f3cea61c391a35c3de5036d87e3075dcb2d58bb4969de9b3f706d09c854caa586e04b83a503b6841d6e80ab5611f439bde991f2cb833407fa9a440d4e77964e1e38865dd65eebfe1af4e633aadc00dd05f5a6d820aadf8003e42f2bd5289fcdac9dc52db45fd13bfcbd4b5426e74eff15cc5541323736e42e3468c380d5fef391af8f3c83bc45213d897e4668228b7d7b66c6cfa866594df0d21f70652f5cece843dd4ab814d870cb84c09db48d1381075cbc755825542dce739a56c62f7a03fbc1448773abb1a6b455af3b69adf7620b922b9d02779793ae8c450f85daa7e8c5ffb90ff28cf3d562ce48ece5cda0814b6706b9b09a9d364b22dbc428d4fe61edefabba991949f908c9a59a9df0a8891027ab0289a585038ae8cf7760692daffa1ba789728b3762b93cc0b1fbd486c2dbadb6340c0352826eab04390164e932f06a6c697dedc8e2c963cfccf9b3bed8b6171488d5e9d8a1bd4415f6d07abd8115e0dc22a3f7c9748c669f88933aeb4429f9da6cd94a22e92965417925efb9c1ca7cc051a57a4dda54b0abe2250aa9d7251e686a00284877aab6a48a70cdc798f8db59cb821bfeef05e251dd0877e32dd34612e5f1ef158e513b56f7395aa41120f2e8f8f08c8515ec45dbf747a8ea770d1ee5236fb24a12621552bb1d3afabd848872220ed352c050a710320849a7b281524ec209dfa92795fdaaf25e8733e73e1bbb8a034578fd442fb2f2a646b9734ebd77b28e1355d7952b6de7931512a87e60b1e497c8b23565a8e781577e30b724571ed0275585518974b559d515ea279c63de7116b9711849d0a6d47f4507fed96d0bce4f4375e04859296b040497dd14a178d71978461687c1b29cdad7d888af6d9b258b829208e5fa7067dc5ee07225747d806f8fcf4058aa10978a192976ab5c6f8bd5da81477599bdfa5abb59c810ac7c3fc8ec26626c91e94f6671abcd8e9eb37a76619b02d3350d2705a7448fca9874c645c22a124b9c8f7cde885abadd76341b302770b34954085ccd459b7c279d5a68e0b5d4879be15bbadea9b776234a581a896820429370177662643690f65e9d06d7e24f74ab559b5e7f71093b44fa9014af57734771df857821204ab5349345eb5d3fb90a2c4466d7948a771d3aaafdb45c2e5b60c2abb76c5bfe67f6b7dd66105c1a2be720d1609a267696358ea21c8f0bb3f0bc3b2494cea97da7f4ee8428a4e8983c7eaaedf4c75cac8da705c0a4027c9f7bd1fe563912060786d3a456f70eb0c3e54b45a5ab6c3c6321bb1fdba98a83c2123dec5de312fc744c19e017c6ed799dbc4aab4466b7ad189410df24345229a18ee4a78187b9ca24f3c1ae6ac157713fd6286873bda162f1ec6e89a5054d1167ab54788d15b56c984925369dc7d9957d02c563f5372d66761cc19b8f075b91282d7f3d406bcc88a542b0517c15da3687572624e44d1fed459109d708438ef5ed70a1b0014cd4b92382292d2cf381a0356d5f8c4dd6cd200c9857d419b6b49ea7511b1f7fff84118f48fba6adcd0b87aeeeac07d2dec0b603b1e84905a070ef0641c0e5cac4bf225a5dd4504a2d20d584b135ebed173a1563f0f5b26637b6b73e70d1a917d487dc6f540c07b6a43bcb2ed4e17ae6d7909037bfaa2ac2261e6435156ec0fafe8181268abe1ffe4dbf44f5da5b0d9231625803722587ece61530ee7e04a4d5b06abb44f6a8b158fb4eca70b715a5591d6190a3ada22e49904cd90448bb22d8db9a00426311e3062674dde0a803fe8824a0cf950ef481a6299cb417c5775f21ef91e9c03f2d6d17cfd047b78b99102790d23e3373d04f05f78b3cd1892b5b320c52c732d45ca24bce895020ffbb3d407e2b5c13dd609f624823a910e8b7b494a9a312bc88bff52e82976a722eedfc7b39dd2dc8056b45ffc85674a8f0821c1e494124ec94a746e70b77523f7aed15802843302b95a2cfe15edd7848cb23147166395a5f182588f75195f670489d1610ee6912538d8fb7056a006a268e978c3153328ff72e768891d383388f1d3640209525f7185b19603c8d597334b11580a161dae0fff761aaaf91ceae6d6d28f1989c0c1749ecfb69565b78ed4641b66bdf6b2369177651f826584010be508d61cd4417fd22fe82ec8c91aa36ef1d9460e29b20141baeef0b4793a23a706270bbc5d89daa7dd01f51a269f871d69c321a98e05af631f4213b105d69cb13faf29e18d46e43b3a05e01a799dff0fb75774953f6ebc3a63814fe673bdda0abd64cacebc2101a2f7e234ffd8a13c097f26c2d6848c1836f7957e85bdafedecbce15676a3e3686b6f66baf8a750164c2e02bef6255e167b355c3cfc263fe12e5a85770ea3e8745f2b7ed3e3facef3c488c681c159400f85a4f343d8510f2ae59d296696af1093640e0777c2801c28a7a50020004dfb87f55edac638e5c62dd25699d0397dc773dd1f5a9c7e266490d1f3f1740c620797c6c56f4b20d9126a6c227bc9c436ffc5b28c1a0131f44bc76252d1088604fc63e88e01e803a4cd59f114b2b269145f423874135dcf25dc491b97506466b3094e1a02682784df0346829eb428b38f971fda3d3236bcb5d366d13cf1dca7ab3d5b1a7c48464271c76bf99ff74006df3c580d29bbabb2704f0f46523356e9c7dabd05a5cec3b1ecdd1cb4b300293bd3a86f4f640c85de0e616d068f72a4873bc05685b1298b67e13c522647e1e6c6e8eb2f54414f52517e50c0ffb9d5cec198e5043cdb2ac1cc1d616626b3589e355f3c2c9fec6953305dc849a9fdbefb5b2ab16f6cae8275e879f530205676683294710e415f7bc8ec26bd5aba9487d0e69d136d656f67da119775cb955bc55272f2f33cc09fb0ef91d0efb4d3559b3edf076fff4899f4932e7a37d4b935b6d311e8546de9aa2415a0e93c0095127cccd886b26f41be9ebe56dc00c31ffe1679fe27847dece9b8fd8d3c5dd7aa9e05721f75b638974f5cc49c30c6df5bea130eb0f92b0f7af2ab110f6d15366dd2d5f569c8e08e02fc1a7024eca3f6056d6dffb473a2728a179ae8ea4163fa8677d4b9b741831b7e9177bd8ba49b12acb5b96431ce100b909b9143f505e04c197dcc771625951592e59125d61f486b8e5474a48ae29a980c2f101a9a6d496ae54d763f12b1777324255aff00d04bb5069b54259f3e932cced3598b1d4890416e23057c8d90bafc439d9c67ef1c07dbb5301b9674cf016298d4335bc4d08b3a546bdd96bbc2f278d1c3e39940a0fbd5520ccc31edffaac3fd4011b7233a92df79b965c7211d6059bcb4706cfb77171e572ee2b64a9ffa9f7e9c5b1cd4bb6cd2b7116222dc05bf5b335c24d9d6afa6ca0a1667d9a90f3b68c4a1509eb8e7f829223cf29903ad5d039d7ceabec5dcb7164b20954f19c90b29022649e9960135cf8d55d1c4b2bdc1bc74e23f1fc7fd97e6993a9098394e615d58b0d824636f0b7c5f9e82610f6f293a87e8d1e3c5bc71e9dc00bdc356527da23f4e8143a6151e9ecdc1bb6e6c559f903dcae2c2077789fe2df576a202cb10b6d720bb38fd724d5244793fdb516f9518edf85ec16c59aab6995019cc5568b00f4d82fffdd63fdcf7958afedd2f69d34e3db3a5ff693646b1fdbd0a12e5f7ff82654b1713f708faa5d300f8176c9f6f07728fb60a31287ac325f021a85ba22ba1a9287d5c83b8c1c1a2eeffc9435e0d5ffee6766ca44a87023e7c63e515cf328ffaf44bc6aac6647a2f955546d118fe7402b9447f08f0bcb16ee9100481680b36bdb1828b97f1ed5c28c7ed6dc5dc284ce790d4a0b5a6c455bda3dfcffc472bbea62ddfcc5c25d532849ebca00dff86f8aca57574653a3e675662ad335a2a6e943d2309e150eae2dfbcb206279c36d0809e59beb6304a0b240c2bb16fd21ed829a7d8b3dd136b620065f2af2df385d69f585eee36dd9884ea07fddd61a9717b35b47f3c53c75ca5b43455c72fe1fa8e42e4deb8c61d2eab6b5c1a2f89cfb9f1df7d4dde405cb2a12bff63ec1cc45d6b13a7c04a17e432cdf13127268755ffcc2ddacc0ad342c169e8f63b6caf39169e7f4f45905c688b847701ce75749854b0963432323b4d3f84eb7e1c031fb808481453de8d8c67a69bb676fbc733367bdcfbc4147077b9abc0267ad4a03121f1b1c7fb2e1e8e02af10347b0b7e27fdb06ba6e932adb95c22897b672fc6abd5bb925f1adb07b66bf2ffdf58ec6855bf39684ba9fd343e5c6d536094490bb0d0b72e0c1117d1cfce07f13df051f11fe0976fd2a6e83354b766198889ddf0641da3db4d0be6e87bdaab51fb3b069ae87c54e32f40308341a5d904e4888a5edcc0c2bbf31e8662f200393681c4e2292d726f9ccd9176225edb3bcd692d17789bdf5f5a2faa601fd5b7e6b0cf117615eee7e514424452f9479a3185027a610287f6eb18aa26399d773ced87f3390ff7c217f915dc023f33769c45832a0200ab94de7ba2fe59ea21ab7183e17298782ef907a78aad5f6ae27495524c7eb76f033", @generic="34f7b8a1eb190346ef6269c7d0bd34da36ae0687a9236c470c3237ad4c1760b106a8d5faf5203e324b7f7cb04dc7b084b8d435691b27cc07d2f74ae23497ebdbd6b04fe6c3d2f092eb249a45d8d28dbfddbbda39369c1ab541a05ddbfb6fc18e447738b88f8fb8bcbd73c59adfcab3952717aeba344a1afedd699e7a698d7f34d8fd4b5a4f87bd4405b4735bdb9073f56e9162877b3ecf318f333db09b55452e03b17502c52a8e65fc994de775aaaa78901f86e4d234119e726c1b0a40974be747c912299c6d02f1b8cf057d2ac096210cd29528d64c3d2a1bc59002fe9cc964c0ababaf5409537a0ef34318a6b5ed04b104c382a8e5e22afd0e67494e35672cb227da982d6b753538d95edf669239ed36e1b865d5182fa1d5521934bb61271bce2a080c4e32dcb4b728198ff6d262691549ccf9afc8188ce92c3faeaccd4b31caf6bd0e2f9591876e41b4be169b54ba9717f856625d8ff3f9996f9d57f8eda93e909dc21a618d1dfdf2583f5bd7757bfdd8a1134e51b74f722f6f30573b83d986d4c72921f37918f46c3024d55d2304ee77d08e3f155df34d4a442f68e70253b67f0e7e835cbde31194524fafa5cc42597135aa4e3c8b27ee9a7854294fe75f484f8e0ea17de9315222d5c99106e57edb4ad24743fafd503a4075f34936eb5553f538c549dadfa6466ae722da2496963dd70dd09d07c5290ddf6accd69cab8ffe5705c0dd2650ee1b1570c637cc87ab50f8566e11d083c65ddfe9865ed444c38f997b8fd9a3f0afd5655295563af385dbf21e3f75128a0e54d832d3dddd8c914fb3ece6b1c70630b570ae2f3f2645f606c0a4e45885ba5873e532e7fb40f489b24fb8e36f65a47e556360405b8bd22458451746e686a99a50359fa457bb897c24d2d297338c8403ceefe0bcf708c03caebc3de350edfa4b0f3f4f64bbc038fab53d5e946130a74918e78f1d01f6a6e00f90b9451a9d12ff836f704ebe713410ba9129c53907f8489ab335581edde40f76f709c358bb7bc69af19c3f57113abe7b27a421cf003e0304ae9c5183bd2c59e6b57cb403190b6fd9841b82781f539947b2dad3fa2c6dc2c25bc7df7781143caf853bd7f4efc4c25b371fb15d83b4ce756222f2dc13c23c95625c1446f4f6519524c251dc17ce0c7565685032209fb33086a27349c98d980197f0d989cae23d96123595cc93f1043f1dbafd64a652f81ee159d24fcebaf231d1c49879352d2a6b6bb58efb9f0679d16e981ca283a7a04e61516578c23b61c269c49676b9259fc5f0cc815f4c186e300e9d8c8943398a326bcb6d78e275698dc3fd6500107bd011ad93c1f2f024a1e28885e615efa0e571ac53d3a7a8bb10f2dbaecb2534ec31e85ca57817f1566a7809e48d94a1b76be33e202ab6d1d36f33ca15729c7b1628354cb6e4362cf48c4d49dd05388610e3d9f534ff10c1fc1d032cd3cb284462ac0a7d5d290f86535b5d3baff02f5fe05c8b3e93dd54de2017e43001b1b74302901947a966edda63fc7d0b56a64a324a4a46ceea0b2cbcbd15775c884275c8b6dd8a3d573f7a0ef39b786c64c6753559e1959bd313bc1c820d19afe3f1caeb52a2f1744f6ba2d39417d11b58236dbef8bdc3e6fa8e31ec4fdcdf2304ee56950882926da0c77803d18f39f53da174034b7452b2d67d49657dcedfdf3edcb3cf3a404bd75023f2333ae94ebfaaf9a6f49a2e1fc9910326966f7a0543c8e171e813f92a89f2395a51420b4592800687afb01004bbf3d9049bf4255959c6db9554de652721217118b11de3ae822fd133d575cb6694e11714de760c73dc67defbde671f74933b4f9d23c17f8c737a923c5c551c3e3442973008ceee0f9294cdce136e57539401eb98d0a5bb08817058c3f1017eb7bd6979662bdd68ab195cd963778b3100c383ee24372b969992df0162c862fe906511526be8d1b6f63f4cdc4789710966d173c80281dfdd45396141747ebac70513672b7f6410297a2e2f9f18640f8ee18638d6a500f9c4414774370ff648380934e0e991059cd2272acec66b5741e1878847a2103b6abdeb99dca28305c85821a5a9a0f1ad256bba1357242ed41e0599d5588ca22d1041e99d5f6a641988625a7cef6bfc95b205740a29f7bfac4e7601d03d52261d092434f7e6501fcedf11d1f28e9a538e1baaa6ace72fe2aea58679fa55d30839805894f9c37ccd9cc4d8ccc767e3f85833b35b3b3fa0c6298d3d78e3ac5a88877347f7f31f286f857f529574bfb8bd6c3fd8861ef40cd4da1a37ca6da19fa65bb72bb1881e9460745a652734c393b021552ec26c5d0745c4756c7bed8e20d8bf442ef1a5307b3c28e6fc47f9aec8a62398c40e47eb1884770ed30faf795406e3618d35d0d47ad162ae555dcc91649263157021ca8ae9ffc5d3d37661745bf884a0143f8cf144fbc538d67d5b9c03bf9249846ccf8aa68ed5a8b9cc70104c7485c4f7871337c5e22791e2ec94638a79f209ef65ee8cb6006d9b1bcffa44676fcd25ecfbb2ab9efa0b21a129d74d86b8a3ebe80372d4991f590e2ae8221680ce8d776a6a51a58e237dddc5500afd7c6977b3859b5ddb3564e195ef61be01c1343b637845dc41c64f773a91f86cbcb1f57daccca1becfb47d4eeba773b7e6d769da50ee5ab5ef27e249a581ccab85b67e1c682b0818671a73c794cff9628460b671a1e1a23dfe9a639ae1b3a1be84be28a6ad53c08673fe8faa7f3a9148e447984bdfa0467ea0af0a86f5c6917828e07fe44b0da691aa38f15d93af19e0bab69cbef9ae0301cbecb262c3633887b3e043c93a97548b6939cd6dcf9fa7f0239f849f708ebdce10ff25489daecc349c90b184af3f25b6b24f29f1b57368246b098a72b64b37d9259bac49a6a550afe4d56d0ca04d17ca7917f53ceda92a717a5ec12260d781e015579fe7b12fcf92c3082df3f9317dc275d3634183769aa897a0a979b99c23fbc8404eed43ef6b512afe57e741d8826fd401739eed3b6235bfe3cefea2e1c4870eee835c5fbc9a01523a668585f69a42e4d2d687cf1f7b217e8deffe75fd25cb9535b637a0609660467cb8ea25fc1ce2ddc5c3f1d85a964e180c459ceea546e0aee3830efd15af5001a2b3d82365be3a8b748925bebf343318ce3c370ffd95c5250aac4cc2bae3dc746ad7f1edbc1b610911b127ce3f51c7a88ba087f82c3d8506a561b469169956b8c9c21c637ed6a9e69576341cac5e4688a3731311e40ff93183b1d8471340fa88fe6c9fe3d815c1c32560801c1c06c50bdc590e20dfd9080e75dd2e126a04c6743af10aa6cda60c87a32d48a07ea0e0de378df2eb8045b48758faf5236f0bfe321092b2691e8aafb1c8adea0913eab0b89acb7dd43c8a2e0dce0c943f1713afbc7786b9e7a65398212d47928747dfb08220c7ddeff0473fd10750b34d1f29789de805a383105a0000fa164b27021f98227bb71b626bd95da82d3cfe83d1c653ff0e8af2698f6316952c316fb570cd95286a7d04c77d1bae616dbd2fa68a6bb9e996eba4631816fddf99d2411bbc1d683c2bdc79d290fa1afb6dab92da70fed585d1314edbb9b2b0839550e0eefa5f7d9d5114a2bdaafc7659f11c6bfaad2487260887bf20b876b93122e0458760f3fab125bc664de7d9e0ae768724e455a4b9a64fa693a5756a4341dce2accdba5a2766f9d96199649bb60caceccaf76db23d708fbc3d311037f704b049b0688c947608bc8349fda0f8af4b5d12538f59c3ce8525a66ccaeb070346020af93d6a888d0e7d9ae790698668f0c115f9c157d9a2b8b014c10f6db2bd133449d32ae7c8c0184762be3fa60b23404fe85a3b93534a967962f8f3e5daad5f1bcb2a39e5078536cd0d2cd32d1772041888902b4f7220cf8ef003fa61c0ff8037f48c4e21abea47d99460a188e3ac3296d172a1b21c63e4f4150175ef72d7dfbf5e84ed71be16e2cb6d20f3229a609407a34df69e4b6020512a38077be487eae216da2b2fe03c56623f97bdb57e9cc3de6ea3ff6b3d68658916a9236848e3f15f9d5664351c4d4446d69fbfe2fa71e8a2904bc3661013f129163ddf6f0e824c83e1087755b33ae1e4a2ce22400a687bb58891c3a8861d74745b67211361bcd5acdd2f70951fceabde34c74ba4f3157924311d644130fdc8ff8840b537760e0c1e0ab6776237b8da46a2ff42542139150d296c4335e6fad1abfacbdcc956bdebee39f16d25430ce462f637357e14e77c6bb00b414d95c3fdbd87f4d227c6389f4baa0fd80b00f440976cdff342a19107d0ea41ac789a49d34c7c1871fc89e4a649e1f875c14a3ede9b10776c4f4c1b041cbde155b3c5be256cbed6af57382f8cc57659bdc33374cb9d55f1b6232945f4a812bd6497e9c9d34107a2afd4b35e35961f895f1dd379934202e8391d8344509df278c6620aa21e7694b25872937e0638837f4623e4ad6505cbd3e7dce5677368efdcb59bdcda4368a4c28698fa3b8b5bfa10f2b7a3374230dba94efbf30f325cd0c184154fc51d5272d93cb6e735f15bd1ffd8bf6997f6a16021a551ed82baf8e801232aa0a8479684d4107a4b26ea5fbd92f9d7abeeb755f4f76bd579a11afe42c84b30f4c8328acec1223c815bea8765ee75cadba34097a5185e598fb6fab5456c67b1adb8a455597b4ca5ffb5c550a415297538b391350bbcbf7d1fc9348fa31d8bc90be1b84194035d46fcab37cf47f7c75c39fb8c32999104c7c93c481555a2a830e30302bba050537622aa7de93460df108130a367a1a82b9380e5f40609c13c7c80b76ea84377d7acf56304af21dfe98579ed6e8c9688d4f2d32786aa85791d918405ff8f3ed34ecb63d04a8a421a0b95d8323d83ff62780534be1afafffa7b2f1f09c058daff1297dee46fcfb234f7a162930cf4f132bb3727d0d782a69566e8d25ac00dde4091b3d43a059c005f57d765818dea65a6151ae3c6db73f0813b7ff51f6313bc150bcd914e4ef82db25e6afea0a766521a651651fa7f1ba4ca2fa6c7a3a3c9d85a4fd4679bd4046bbdcf9e6a88ff47559bcf6edf14c2efbde74a0f6f0a5e8b01e786163a0ab86d801043cfd5f044af78c981722e7817e7db89455c1f36b913266cb9caff6988f3252eada825249b6e9a9392f5082a7b682be1d9795a547d208012a4b478272fd6ff7e8286bb5f537e20b0c624c7f97fc2907793ae439e5a2d6246df0c2260ecfc03433d510550a25480f4f6781158785c47a7b1f45fab744426ae362b63695439845f174ea9b24bc241141d95db2e82614879960144810aa1a64aa44fb52e085b01edb84b9638608be1c61c761b48a3f478b6fb33b2a8ea31adec3f0f566e22d683e338dfb737503fbc0b10feddc3ab1ebab2c8ad301bf31a3f8ed04d4b4356501a7c89993dbe4404eb7dac3d562294bd068ee77047b11f831b65151b94c9738082b6bff5fd275f52836dbd00b75509fa36cc403898077b12709b0503cd18ff7dd55053200060cd5e2c85c64880fa1ecd608ce05b61c979f4eae73991aacd7a1f7d5456122deb8a88dc3f90c37eacb6d2f38a478d6873a0e7827df7c3d0fec9c7b958d4ccaacfd0f3bf660da9496a75429fac742055080b43a4d36b19228e42adbd26b73324031315ed5141b61157705dfac0db9806175a8f3a19c012f8dfdda34131ff10efb30da0297a3c78763bd88ed41f7e3d5095c79e5e2f91804765d2e50f834cd366ef2be99325f173cd706922d0fe1257e877902b3ecea2efe34c935e53b1532a413c10e44dfbc6f81d23c5fde680655c", @nested={0x267, 0x63, 0x0, 0x1, [@generic="951d5d664cf2d59c842a307ff8e26f3c6402bd36b415613a1b688e3a4e4e054d36ad95373fd83f6ecd2dd6b157fe4c33a44705f61ac3a32aa6b97c592ee455fe898a2f2b4ae46111cf90ba5518a66dbd3807c764c61c8c768b706355cace361937e3365a1d7eac2219b104f0253be8e6a450ffb4f30363e3f76078300d12d25d9b704d559944f077a6d636c973439df76d8f96a01187a12393289205bade412d6fdc7d4796f75a967a3f013e870b78a16e1bd4e043ae49e06fe709875ed8", @generic="d21170848df2e9479355a8a3d9bfc21a8dc177ab7eda345198ca5154dd22aaed82e74dbc0a343ad23f5b647e1e65aedcd7eab398ab4bdeb62ef24a7b26267ec7ea9fcbfc945388ace961f34dc91b50374b189118f5dc074970693fd5670546c0473b9cedec65a0f727798c1812fa2408e87543675bcb5aae5bfd24fd9a549d4e21d09e34d908a8152365b9b0517812051772a073fb03e42c34a5d5e9e219ee3feec6bd62ee7bdefaf82d630d1fd7315003236ef225f9bf93b4b707bd3d3b65bcf4a41fb454d1c20f7c26c0b107319fbd2750a8b763bee4618e10c873", @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}, @generic="941321fa230baf0a984218f836c40e86d53f5bc6efa08b137e3d9fd6f5b2d1c84da5d7894632c58c99368e1bfe6eca321b6d7f4144f49caf92f022a3da8063ac4e7fa5ae5e8054d465c375eb006d5d5efc09ef0dd6faa24bb9ec07316b6ac1b7ffb553e669dc", @generic="f1e7dc7be23ab29b0160ba98ecf70720c69a6e61dd0d46d02716bf5a9385657c91dec6c9686f65a65878b93ca084a46bb0a7a922f64220605284ce872c9231a42cec9155e6310c100e30627dbf924898880f5db39eb7591f7ef0fd"]}, @generic="4788337bb2136d0edee53a63473293c6ec6a660e060a71dfacc2ebbee2587f777b8bd554a50706ba2aed539b8d18748d741be3286ee0fef6c33c26acc55a739d9963288325bb80ccf6575441895c2db2f31de85c00f66c798f5a7be3a3eef6759d170702c5a326e91624dfe077b604400cc5e471b2672988fc16e1567c3ed32519b4a9945fa4dabd5b22f5f577ae6adf03762a8879d500"]}, 0x2648}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400180000001ae05b39000100370c00"/30], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12:12:05 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r7 = mq_open(&(0x7f0000000180)='/dev/nvram\x00', 0x800, 0x20, &(0x7f00000001c0)={0x1, 0x1, 0x80000001, 0xdb4}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r9, 0x0, r8) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x1000}, {r6, 0x1}, {r7, 0x2}, {r1, 0x40}, {0xffffffffffffffff, 0x11c5}, {r8, 0x8000}, {r0, 0x8}, {r0, 0x4046}], 0x9, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)={[0x4]}, 0x8) 12:12:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2100.440123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=25211 comm=syz-executor.1 [ 2100.464871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.465030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=25211 comm=syz-executor.1 [ 2100.507457] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2100.598900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2100.601375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2100.605778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:12:22 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:22 executing program 1: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="10092100a0426589e4321fbb7da1212bc7098df2debac3875c456455443bc2483803272300009f273c239aa2af4d5d345a48f396b46f4fe1f8799d8906bc9fdfc52b9a126738631fbec0154b8dac3875f65428a2be138c4122ea8e640000000000000000"], 0x14}}, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x6d7e, &(0x7f0000000480)={0x0, 0x8129, 0x10, 0x4, 0x4, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000200)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff01000000000000000000000000000100"/199], 0x110) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 12:12:22 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:12:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:12:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00.Ifile0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000010000001800000008d89c4c8109d2006c0743ae667ac39d736ed21de1f305740fdabd5f7d3a8849d636d52bbdb854b0bfcaab27835315f83a955bfb94901bf340659abdce1e0e7f88b68739512b4b4c0c12acb48d01c19535c1a781354e154d5d54e1fe3ecf526a6db5b7b502e92e8e32e5c54ce4db06fd0e852a05aa889c49bc82a86a3459afe885e75a0da4bea11360fa95046e5704d4e036b5e3f00e9b40727ce3096ebb020caf22bb30f76d1fe9aaedb6378dce4b9caa56751bb9f2ad6b8a6301acbe00"/211, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000f5ff0000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) open(&(0x7f00000001c0)='./file0\x00', 0x32000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000001000)) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2117.055999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2117.065830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.079083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.116079] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2117.116863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendmmsg$inet(r0, &(0x7f0000001b40)=[{{&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000140)="d8a835709b621f10bedd856a810457d1d0ea4059274a38060fde971bac73598bf9642ed41fde5f461ded9fc34238d633764fa8e6412259326f29689ade7f7311680b7d9dbb01acdd53f2ef12aee582ce5ef101fdef9d3cbf9805622c12d0297378322469adaefa315796b6b6e6533f7e4419b4c3d150ef3ed34168a4b42aef075568a2272c7636a4e340f7e975c6708ce032657d1bc51c880700655bae124eb2a1d013538045fc5ebfe4a77348f724c5f192af87fb6b92a51f5932eb1be299f1093ec1d0956923", 0xc7}, {&(0x7f0000000240)="60fce844715e29bf030b6d537c43f7aa388271e98c538a6cb6ff8a3ccf4dfccfa0664ed9989ae2c37f9967fcc5d2a12376ad465881b16dc159b3b4c3f8fcc3772a41a9734538967615a01d38fd856609a2e981d7a750c66d576c8b91ba64c5a7356fb1278a9e9f", 0x67}, {&(0x7f00000002c0)="fa55e5da254e47d7fa073e1fe35e04701490da20ab905cc0d79d3ab8bae81d73604495ae0c9c9e06beef197194b2176e29dbe4d9257ff1b2c161c06a5b8f2661b2cda05c0283ec2391ae433829e5715d90408aa797b61f8da5df268f74b990ec612edd3615da9ca6345e29ace90637ae505a57c8f9ea7d", 0x77}, {&(0x7f0000000340)="39e6cd2ba16417cbac7df40801a346ae7b6bde98f458a10ec719aa8387db5b4d47d8576acd7c94bdb99782e4e0162cda57a72739e64501f5af40591500cd981155e500f73baec0ea25af71b083028c0d7d5eaf89edfaea757684430e22b870636032af76d9109050795db4504c18d7f88d5b4b4fc560c194ea2ff38f77bf2ef48dda49d30cfd2f7efb1fb19f617548c1829bfc8cb8a4e57b3c5888ce36fda0f06d2dd17253b14fbba59786737a003733651260", 0xb3}, {&(0x7f0000000400)="d67f55548c9206200b16c0e95bd50b3fb861e2f4b8bd9a9d261aecb9ce8a63463f1114bd4aa2472f5c68e2b988d1cbb37fe972f9d0ff50fe0d18f18f9bf2574ced0e0b312805ed4a8bb62c889eea04264b8c19efcd5c17909f9b26b218f2954f1311fd0414aabee8f6852dbf85925bc6a9914c9b5b13283b054b559d40f991f9f3cb629dd779cd55dd9d6638da8cb7020b1e7db740bf71afdfe6c4f7b5134abcf4bc48e5931824ccf9b0d36ef15e10e8657d1a96dd75fa3d9b", 0xb9}, {&(0x7f00000004c0)="7070466f7ab38e86c4154d355c4957b71b4e5a33b33dd7e2da2b12e9a8ba481747ffd3963affcbf7ee5205af4ee15b655f7b2520a1ab4ddd7bfe7b7c5622a1daee2b26077547b8690eb0b524747d6bfc89768f76f2d305bb5d2f7b87f8b2668657b34197d073c6a89c", 0x69}, {&(0x7f0000000540)="c5b0b98b87be015e9b25ec3a0c927a41379b87c6188c42df445a0a1d892dc0289c48d1ab77b966b79083bd18cdc70cab39a527c13ab6592d0230663e6ebf0fd8f1600582413f53481cb36d", 0x4b}, {&(0x7f00000005c0)}], 0x8, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x50}}, {{&(0x7f0000000700)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="503e113b075c63e677a2be8ee36219cd922257786187a03a3ded95bc6b7b741cb106e5b7b2f72d96c5196450568ae3e2abd33eedda2d334b106ba42b7a0fb4f07ef102945c28627e31f8", 0x4a}, {&(0x7f00000007c0)="fbfe9f480e82ad938160af3da8725492bdcc3f0aee4c751095172f90ec9db7ece0b6545150c83bb758efa56dba5ac98d1d01d9b74b4ed6510adc03f94ad5eea97c858daf5963b17115cb937747fe62750c484cb6174062e6dad77d750843901a31a4c859386c3e919be9f19091032ef85b015a319bd0733c37e6d749abd3e717c1f98e839645f5128fe4251efc095c35f3dd19d40ca586935a3171b8a2cf302bb878f4462970aa70d579", 0xaa}, {&(0x7f0000000880)="a279aee60cbb76bcad1dd30234022a7d65beaab8e08ee83a433887947552b4d3b94f2e7e88cbe684b8a68b7285a44ee8ab7db2f0a833a14462ac604344c8f1d841a056a1e08022a56537e0a58fd1238939fa091876ecca0ba804a07ba61abef0698ad891bff5555c593fa150ca454255cd3e4d43913b3069ff35db8db0ae0c05e7da53f6351fc4c29737b66be7756982089026d674b8f506a581898ee2bfdd245cbe9764c59cd4af2df9ec70e1c381ca4dadb15668adab323d60039127b5f87484bfe63dd37fb7845f74b3d85453ff414628a276c7fde3a82a4765103ca13578265bdf", 0xe3}], 0x3, &(0x7f00000009c0)=[@ip_retopts={{0x78, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x44, 0x7d, 0x3, 0x2, [{@multicast2, 0x4000000}, {@local, 0x1}, {@local, 0x5}, {@private=0xa010100, 0xafd}, {@multicast2, 0xb3a}, {@private=0xa010101, 0xc8280000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfff}, {@local, 0x2}]}, @ssrr={0x89, 0x7, 0xa5, [@private=0xa010101]}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x3, [{@multicast2, 0x1000}, {@loopback, 0x80000000}, {@broadcast, 0x6}]}]}}}], 0x78}}, {{&(0x7f0000000a40)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000a80)="5f42421621b22c092475c771563d6536d8e1f302af7164e9b6f7e10eae829fdac7f2a9f79a02aaec0c14b7b81d06b996040dab575dc07a4d1f1e6bf41edf6b7d95729cf7a74ef61bc1b8a2962c70a09c9125d080c017cda27ec10d5a0bd345a44f7f49327e7b52421335ec0a67d0d86458d7da49e94af29118cdd4bf6e9e626a326381e2f4f4ddf936bc73c1da38420c8f99777911fcebd8bb7028b9659c261751e85203a35f9c942f08f8a3d9a1d2f1de63380e94a6ff1fdd19b1cbd018851ea8", 0xc1}, {&(0x7f0000000b80)="ac6c5af4b09927fc7fe1b48ce1f52a4843a4242cc0860bbce528f5c73df36785105f5b93b4d284ae5553f38d9e4a006e14cd43d75616f175ccaccb75bc45d7d053602d4ce7d9f0df55c42962f50186a4c381f570d1164e0911acde45b7fb86583a9017f3bad9801a08b79a15c791fe52fc3b7d5006cb042142f698798b5a6a0496ff114592627438336b23fcb9c6dc9c2d83dca6cacdbe89717f67d5bb56e767b77682b418e74416ea31aab95d4485efb408", 0xb2}, {&(0x7f0000000c40)="f0", 0x1}], 0x3}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="9a97216d20f4ca18dd95be43f88605af2f30f880c175168c471dd7edc5d5402bbbb26ee20812ee1435907d4b0870d93564811fffb96cfa71c49b11eb5a2b55ab9f25da20f3fe328849ea26b6ce24a15f2ee3450c", 0x54}, {&(0x7f0000000d80)="cbeec89698316e04c376bdaf87fb1fac7f70238aeabeb61ae084c50ebf4ca3d32f66e994df4f853e8c1889d4070d3a4f80c96bb0d0169f0ed11429a7da69b1d863cd9abbf276157298ec83c718cd2e5bf08eef12b29a42bffb04702955b6c7fddbf36e44015d3edf6ec249826e2ee7f6cca4073fbf5d419b4dc63b8671ed2d823ffbdcfd4e5a8c001b913f14c6d6b63fb6ae5996d91c5f38abf9f6f298890c71ac063c1ff15ef41749b9a8784f829439abad84e4c8bd22dbf2c08fb601d99d893db4d53d0d391447bd51c55c69215d063b5cc7deeebb6753013915bd4227ac626d5e670ff99d4a830e226ee8efd71dc4d14b0e84", 0xf4}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000e80)="6822e96c665db6c67a2eeebae1acd68eb0454095248977cb3924f69350", 0x1d}], 0x4, &(0x7f0000000f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5e88ce15}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x96, 0x0, 0xe, [0x101, 0xfffff000, 0x200, 0xf1, 0x80]}]}}}], 0x108}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)="291090cbb64c4669b8bed55c1f158ed26e9d43c4b802b9b3da8a764719c4480a0829c243ed63b3c1741df60d0d025092195dde01dae3d05d59c00062cd", 0x3d}, {&(0x7f0000001080)="58f798b69e229333c4ed88b97132e97d9b322c5668b3d3d3e6753d1d88c669b6c9731d227c6701fb02e287eec364ede9d60df441030f832dc571c6534850f6486d3275c3b7177f68a60558dafd3c450439de46ebd86cb4fd811ee97fbaa6e5acafeb1b0b2d1f3f2208459b09df8992ebdabcc768280874e502d257e446e439c069c49e7aaf02b8", 0x87}], 0x2}}, {{&(0x7f0000001180)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000001840)=[{&(0x7f00000011c0)="dbc603532eaa8e922e70fff418d48b6ed1a2f5f3a77626041f2ce1dc565d597cb9cc9d471e0c46d90cb3940abf3fe285e2458cf9c1718e0f04b8046eafcc8651559151d1f1a74a78efa47825de6d1a528d289c910159a4eefeb3c38025275b27e3702eab939d7f5b4531d4e27bc71b00e527315e185098fad854e2436308bf48e15b5fbe7bbbaa55398c30ac9e6f66883b27d86372644d35e7b1d9616540f4b5bfcd2c1bd8291b7eda4d1b9aae92506d9b49fe4a543d0e", 0xb7}, {&(0x7f0000001280)="24c46ae574f92c696bf1b8161d72ef875e495bf2c7d1e258b9b469", 0x1b}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="a7d6cf0bec076bb96a57d5c08ec37abbf1b1391c7e4fde07fcc6c200e79bd1fda4a040d4b98019227fe69aca7fffaac942c4ba6f6736747c59f0d84846322ed401b6b341d6a61997c23afc876cc2afe3ab38747d41d578652e00f285d5643764a6e94d0639998cc2fc416798b602c152044f60ae7955ac07c29e2cb24171ec45c24719dad97d0bb3a6b8c03b37f768ba748b3e4ea4b36fc889466a7d87084a3ccb1fa4d8accc9c7478c8d00e6e56f8697115d1a5020c995d18715545219d53", 0xbf}, {&(0x7f00000013c0)="a69929cb288a8c24e7824442f4b32af47e9ed3b79ab1fd7931ea1ce1a89429210689e9243a6c927e182b9638fa4d0d420618a050941c3ec59e8c5a8f774ec8002565e4f35ebfbbb06bb393cd1607ad91acdc002e0a7b3c981c4687e10ccbb1391e6b914207f587646cc759c1990e42a8da1f1aa55885d77d67b9b3ffba50aeef74a58a736493bb7cf91de35012b866ec906f093ecf210ca83ccede5108941d6ba1391cbb857b1d6febe4bd10d2c1dd1a794e15a1f0c0", 0xb6}, {&(0x7f0000001480)="6b9c2af0d490dbaa17894059ff366c2cbfe0b271e15d", 0x16}, {&(0x7f00000014c0)="ac7c72ff5a1cdfc45a63d84410d1e4bb077151b6e7958c438a3a9d54fb0a0229baf2589636ea56e013265b66183e9c23fb945e6b4ec0bbce35c615782fe6d0f8265168b98ce5c9d680f70675d9524fa58143e645459bf88d2f4eb58a10f13c066f11569984e2161204eb1b3eb116014ef9fcaf5398f970f3c5e7c023ec3866ada00bccc1321ffda0", 0x88}, {&(0x7f0000001580)="776ced86629cce5b265366b39b20d4fca67943898c07da405149c473eb5074e65d79281cd34b83104a3eee9adaa83b5d03aca1b64588e22d18fd8c87d86f860fb98f35f87d7775f83a78e169cb92590df94556882088fac38141e070d2808f0d76621dee32cf2ec46fa745e7966b46f332984a4a124efebcb3f00eb473f20f86729710d9a92fc514353957a44c860a46847c854e259080d780b7da1b62a7c29f433d49113bc346", 0xa7}, {&(0x7f0000001640)="9e830ce2d47960b679ec1579a89c20097b73fd40210bd8c049c1aa7532040e724c2100cde9b17b0018a0f459f00c6f8caf197f96798a80aab5c9e9d30c85ce6154f18569fc558c5383bb045b9359c8c5ee3f9291193739da92d19078c99659e61aa241e38ff8d16bea8c5919367f599f8550cf7cc86826c780cd72b04246d2cf62ef0a234ac2f4a07f40bd24e09f4e10dc7bf56920892603d1069b39e6a2e8c8693f1aa6858dbd4a3b12f9ab82f035d29528f0ac9f24be3263c119638fef4ae6ada8c9941a9d501f3c3d09d727b39cec0ffe9b952596a222", 0xd8}, {&(0x7f0000001740)="86b292782fe92c98c304c7ed5f2880e3e8fee721de7626829e8e9e64ef1ebe6ae115fbf4efa2bed9727a847c5eb69726ddb3075f72ee091f36d2a8093c61917656d2a7d38c363a53afb103686f93d26d27e8325f2b52107b64a62ec24ce5d3a765aaa7f40419f3a3ba33ce868bacdf84db2ba2bcb8b73504abc5626ecbefa6b798baffa78881bc7458a7926720ab8bf8e2e082233faff02339ea04d123bb900d9dff7cc5f49812801e3153791704873d8406dbcbb5e675f4f53e88730aa1ce3abad334374881d040dc2944755e6a7fa7a606a8d508", 0xd5}], 0xa}}, {{&(0x7f0000001900)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001940)="f0c9f4a3e1390f5998f83e7b7816783c10888ce772f28b87e9a6d6f3284343d95278b8b3cb8f05b7c29b1ed3bd562357a5f758e03960024741b8dcab88e3ba773f4665a4973cd55f743f687ff1e69a4ce96654a223aea45a8574652a0541548674e074138598e241a92c6336239b79493c01333b1e6cb6cf9e9785ab2aaa479b0b64283c2b5ece207b9a665a760bcf9ce8a2ca8f807b5a3cc418d9252519e7b7051f5f35da0823fb7efc96647f52b1e156012ae6eff56f60b0bd0ceb", 0xbc}, {&(0x7f0000001a00)="c3afeafeaa6f08740d17a8f9a8b2fd2ee0ed5a4a09d53c20a76bdef04acbdcf6c6a52ace139cf9268713625a14631f082ffaf8703d608eefaa07ee6a571e69e4362ab8e5476047c9ed56ad112dcf0d1ecf2fa00b3b76b19cff63bc43006f1896b9fa34692c3682ce067c52c75f192c154a748c5f5b9c94f945d26821ac9008923550517949160bf52b38ed570069ba477c91a2d555ef7dea7d29095906d01023d756c18e083e0fbda2f61a9afccd284e445cfa93078bb5820ed96d302a2383c3f92c24001a5cfce2dc513c26230f1ac90506ec7923311a008df9ee15ead7d5c267c3c556d1eff36a64", 0xe9}], 0x2}}], 0x7, 0x20008051) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fcntl$setstatus(r3, 0x4, 0x40000) [ 2117.199091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.200843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.202772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:22 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="64c492dd90c7e92a0787eb971350200d466600000000180000000418bc648de9bfe9fbb675ef050ca5451af47f3edfb4ea4e527d49edfdc4a3362befef8a5cd3049fb5bdad6702ca1504de9ae9ff898200ea25a0ac847e6d651b2881934df81bc6855d093c8358543e4c31a7f6f1713db5ea67f498c79471ca2581856312892ddcfc28a239a77992", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) socket$unix(0x1, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) connect$unix(r2, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:22 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:22 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file1\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20500, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x3f, 0x80000001, 0x0, 0xfffffffffffffe00}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001e00)={{r0}, "90875d4da7ae10c7e57a48cb87caeb105503efb3847cc5db8ea926831d13846f46cbd4e0a8cf7b3d7f5a7e73235a22341b678dddc78d936e9fd6015becbeb8d5bc6260fe4e25c38d0ebe95da711507da8397d4eab4206f96fb213f4b527580ea41e6dc6bb0dc09d011ec7bcb6e454df1f45030a81d57b120e7e4858406b998a691e3eb871d4b5e3118c2acc40b380d21ba60129381503432618f1f3b82239cc5bdcf5f84c37a493c88940f6656fdf6308acf39a279185436619ae5bdd174f27746c39fdc6a28616985419e40f24cedea6fa12017294257a6ca82b0f1c87e208f46883abd2b0facfe9ec965423374238f1e39b6ab0103ace5ccda2e9863c7e907bc672612a46775c83e76a061c23e7f6dc806f1344d9d1500a435a56d110e69861bc57db074527dd6e6667002b9baf65e921c5022b19e2054ce65000a978ffecd0f0a4c9fc441a086fc44a1c1ee448d976cedf46cd0d7c2578bebe6530cce20adfd56de2226d8779129c85f8efd9d6f581393ca48974829e39557cb1f106072b05200f8e4414ea59bf7c2f0b5ae7e92c96b6ad5ca42a3a87a888f44f8ebbf11e0160b206a22b0aa1ebfc1ec72a6c18daf2fb84ea7a3a4129b78377468f4f7aca89c6d81a6738580002a37270d9196b4391db4c064a21ee88112772a23bab1cee920b85f15c608aaeedecd67159a70b92f3530ecbb32373b49752cc24d1d861172467928dc7a829b79ec0f4304b41c1bc6e8896b64c54396c2a62b4bfc2f21bf4dd1268bb2141a4eddc2faba356d73c78352de8ffdf48a49c6b4ee6f3abe5ffd2bb7f4a6be996cd9b03ab63cc1027f46ef275d3320337228e1488adcba9380361d1ec93b9c1be19ea7d1d3b76e1ef7de75b1ec09639febb4063b4f4b7ca1810cb624e87472181286a83e13cbee7a32948d17dfddbf72d5bc4471f81ddd7366544f2bcc6824f00630b6381d6ab60df39a9578eaf5d58b9146a540fe0d3fe827abcf950c24fe84ad742388f302e2ae41e8a0f8cc159ffe24a668e5afbb2dc72a3d461c083bdeaf014f0044bf3c355bc8d2884a324ce166fb3a0b7dfd09ea39363577fe95b4af357c74c3de8593194a14b79b41801ca1f4ceb9fd13d1cc1478a79362898865d68d26ac1c04446b3d491d0b2feef23db5f46cc1196073ec82b48e030e0c8c9cbb0ca088e7901930a2aee2ee1c646e9fa7c24552a58a684fa089eb8702564d6fd788a83b6758e8ec9ef812edfe240ffe883930e142dd7740c87c877ef93a2e9d7db51dc29a6dab51043697e09fd2740b25103867540d3f1e627e7800a498637ea200125bb98813b90b2101fdc13c203839fbb25ebba21f7076842ea198eb570d1cae0323706d9f8c0adc5880bf636055bb47ad91097a5312134221f13ba1f0b157eda3c09d2bd5656aac59f3a9b0f2d37e82587bd89088b728f56ca8e9946b9d6e92101af9cd6a70afabc7e6652f4d3c58544718ecfa52ee8710f7bc5409c3278f2775cfe3343bdf5eab2de0b0164aed08f475a8bf932e6726ef17062be84e0804bd9f5a9fe6c78886f26ebd383ef847cff247eafe1453674e29bf5435958c4a1a2a5dbe3eb4cd6d04bda4b2708cc1b2351a1e6be192a3e51bbfb85fbf24b0c213a3880ea43d97acae3c440bd0d8ca2c9208fee47788dce5106433c398947932a491e9e9a10b4a0020e2c4682801cc84b21429f4a34465cd4c8c571f1b8b78bc531b995a308f598e8e6e63a35284f5baad07630a5ec0b91b2e8ce90ea4a8d7d26dcecd56cf1d45428d46d7af091a7fb0232caae7329549b2d9d001a91e751916c485b20fb4f6fa3fc51b900121d48a4028ffd8b65af8dba958d756967b71544cc105c86aa0dffd359dc8f998b5211e6225b4cddeb592f069a688e973fcb952299c094476ec7fd064c3eec1a0505e34306f00f8abd89cefb1c1bd27e5bccdf2a87d4b660bc883a76cb262e15b96b5b12e3fe9e35ad21081e1e5ab50073cf9f1973f5bc73a6f26fee12e39cbe74eb26265b77f64a16e172919613d3f52175d7485383390e57490b97f94f3534f27063420f5eae48f730a5aeb8a0c6ac7be7571a40c5b50904d8c3004c65f7956432b8900f684fcdc37a7d0220a16ec5ddd8122726fcac9fd770a12be51c66d88e018b4fde3a63621640f3ba8c005467b476d9921b036886370454f55d4dacdc2e63eae531177e36eb1d46771c4f3bc28ed78e2a6ef2c234924f985e686b05716fadbc610936f97d1e5f3f21178beba343aa5d27650c8746b098af85a15007b9223ef8dd1abf5851c067537f85a2f97ab34bbfca2c27f1bf278420d9f5d88a38d15090a4bfcc46352061b722e7daa1f35645adc4155b4b8c68f0df0df8d128b011e86e6fa8cb40487ce9d8d24d0453ff7cf9cba672356da0388369fb00ccffa789110a54477801d8efac7f807a9544888e5b4504e4b52a8224340775ea82fbfda538027a6bf2ac63123f0714cc47ebf397bf3ed9ca37e92a119cf537e5e4f22bd35a7adb47b6eae408553f022228589051d5a4b598fcd8fd72caf105b8b856d6f7d14f14c36da2a2ca7d5139be12bf9e94d5efb026eabd113fd0a62f6df27970fade2328fad52368109dd15b3736fbffcbed2ae34df61c567ee2b367f574f6dc44fb955f5a3fab0a701523dd12b17aa9a083c0551565e04391201b4fd13ea31b87fbefc25a29b3675eb54eb6677b31f1ffe6a56cb51c52f043204500ff77642d45683bc02f523936d597f769768768588bb70b08304d02bf0079e02501292e5905604cc2a681b01b3a078e7616d34b5b74683b9228fde8ce612a134aa6a8aafdf3e97e290372ead7a33c5225c0af936fbd3451867028765355721d2a0858f660debde59a51c072001b843e9b4bc9ea1391baa2de5e70b5422d13fd3841675d5b00c517b4043735c03e1879a9a68f54d2ce4eeb9fea7866b77b8d8d9d9fb5b823d14d75ff1876b8709bacd2c6c0ccc847590cf55a2597750ad8c1b9c677ae0f8a01472cf91db15822a7629d3f7859ecbb531e9da062c2c5e20ec50a711acf8da90d9b68f16c839cdb60d797279f1d0131f306164ec51c6e45a6f703b7116cfca1afbc57ae93ae89615f82515c9ceb2aa7c7929fa0dcb698e9df852da8c97e309a97748415b788aed31653e975c80a93d1a4b52a78fa9830e7af5ad1844ea11c1cac050cfb6e7f331920285cfb15489c014391bd83844f0f53d8823a5af6f96fb5482ba40a41b060e34d3e546a2e6c48736aaa6467cfbf70ba93758f3f584b6173249c0eea466059a4eeaca467cd85efeba655c9fc693eb96a04358e642c927d0a1ad0c9578296eb88e682a249d58ba94fd30027302701a0ca1d80e4c8bbb2e8aba1c3d83d01008b8d6017c3ebeed03e615fa60cc5f5f6becafd986855f7cf30d49ca233511e0565805f500ec893da6e227eed4b8fec29a4ccbc0706f52a088e0c00163f0113f8747ed388524aee1d5cb89eca9f9594a004f85402ea56c183b76fa35cf1f9d077b108fef352305a3427d11e57d9998b97dc400331a3baa47b162bcd848774a2adff9f9cfe1138ff80a30c035171c207b17f764965394c728975d1797f51dcd5bd85e4fbdfeba0d26f51fb6c5323d447547f616d3d5355935cc55dd3b77d0ae98fdaaab211fb9612a396d5db603e27e82f2ecacef1e74b007883d3c5248edd6f54166ca6565b5f13cff22a3e7c57398ff8ea410b03acba92dbfc880dc89a7900a911bc4e5c1c3082a5d68a56549236adb652a8915d4005434c2b4f26675a10fd2bb6ece377420ed54ca20f2388321dd974cce10decfd9e7e4bfe3f7ff4ec640694aa30798eddc7c1e25fd708f56054a898f35d408d4ec9e8fd975dffcbb3bd56ecd2bc6af14252a0ae4f1a8e310d64bc9659cfddf9747d0fe7dd256c7759362d18633d279a5932c7b5ad1921e3c34c9100e3a696a0a532a5ec3242b85af005708112cef89ab1c6379d314d7409203e837ea7556a1978b52f0309e97fe078db5ce63795c546a32b60372e6a130e2067a32a6779f583964a472eb042eae85b9ca71b484ee31bfd0c93ac89c76572a8032c7eb7eeeed0a1525873754a55e276a8f9e0ec377f5f7ddb16eb4f672262206a387153a531cd9b747bf4190b16653ee897076b315545b51d9b3337d194f063b34fa695cb1271db7e915246bcdfecdfb4a4c50da363b026c32a278bd14f97351375a76eb7c15e57898aaa8e01aae12271652416536504792d9a275ef7040c81a9b405b7d044c3474a21e172dbbcb1922b7a1216b92fdcc208476e1a5c12b807356fc1e51f442e9f734b55b1ad2f60e4e735058fc72ee8fb83400294c10d57f084b5858976d1e2e17349ff0cd49a75f2f0a644879658cc59d2e946e418414989f47339263ac7690157968652fbfe9a82c305a2ba047816cc95daea2ac3945cba634e168181b41c686f86198df346c75f8dc0a253a3ceda8173c1aa6ed19d79b6ce0d69524964d2b50127ec39231eaf7d09ea132c15c73d63ae1802d9f47b448d1717c5c22a334c90c5961f06fcf613cdd31766133c117dc0ef3e937c852937265fbd9f0608b7106ab99f16af9999da1035bc8753bd13ed8eea3f6134e4564d17d037c7dcb7a0b519bc79c576756e5e1d7ed56af2ab5796d22c86c3e0a653eedf6b90370324961d7b3054359d8a40ff2c0dda09f25eae11e65165ab2cca929fc59d703852c0546db2d480e760948cc11547719831e4682435922199098b05a7daaf970004659fdd3969cac67c509faa8fa70ce6664dc520abd90d339f84dfb1e713c3f94940b51d4962721d3ce31e84622ae460d57a1c65d2a00cb75701fc66f5d2fc67f7bdcd478fb086cb93dec2065513b434ff2790080e153856464c213f071024519d21996d87aaccd855c4dcd6e134225014b546205924621fd67c7fae26ea41cf55021cc2c01962a3ddc267afe02040a9c6756824fb8194ee7dd20bba4458b7103c958aaf61faee487c4b498525bed792f921fd65c2a4efa1971b75c2016d256b26151d2305637edd70c08333a37420adea76e4ccd0a557e006dd21761291b538c1c3bd05ab710bf3acc7abb5013ab1968bc7d4cd9b4d0bdfde64a11e7ac95d397886a7bf6e6773a464c64ca7c354c1bdc9344251d570c7d5229f18a6efef68f1f5aa6c64a3e72ecee0bee5c4a92c2943b06839a0a0896516de4a4b1f1927b06dd7b75d0de92c9f098bf177ef67ac27840e407a271a78f77ad3e5185c0ac84cea6fc690915f949b8b4234e6b4021cc2ee56053865f35294e79bea21873a2f4ab3e1c8d1be9fdf4de0032d43df2be78c957313ec9e4681c3c1857b4c2e6ded8992e32b582d26136dde019c7178c42e6bd335f3c2ee4d7a0dc83ce79fd6ac4d84a9cd3c7e8e2b58c3f6ae9d2f339518c348a74782de124406fb62a9f7b983611336b6a1874f767fbc077990b741bbcf1908f5d5a13bffdae230d7f304c39538f28e4e3c7cee8a151272553cb2be8d40345fd4c01d79ebf52b644ac8b51c03638bc4e26f41bd9239b6655f738e34b4b9e96b50a3cc52c609824b89735eab5229547c1414d5ec752160c5bb6b0b60669acfe2424fdb92900ab5989491a9528efebc3be9ae2db380d54f73cb739fa7f317aeb33834e73c6a6cd82b1011f6cdc7d6060c3f0b1271c8756fc1daba7e83b21e80203dfe3ea45eac9694e1ff8449a2285f8443405b6c4edd5d67a057819132121288ca833356426e69a41a32cb8898f87ff8f4df614a991a52638d19be710adead996f035cc"}) unshare(0x48020200) 12:12:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00.?file0\x00']) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x40, 0x26, &(0x7f0000000200)={0xfffffffffffeffff, 0x1ff, 0xc91, 0x8}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r3, r1) bind$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r7, 0x0, r6) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xfffffed4) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000080), &(0x7f0000000040)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x1) 12:12:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:12:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x3010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x10}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2117.594199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2117.668166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.683577] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:12:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:12:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xb, 0x7) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @empty}}) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x14, &(0x7f0000000140)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) lseek(r2, 0xfffffffffffffff7, 0x1) socket$unix(0x1, 0x5, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x14e4, {{0x2, 0x4e21, @local}}}, 0x88) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x3f, 0x2, 0x20, 0x0, 0x100, 0x14580, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x68f2589f, 0x56aa9202671bac4, @perf_config_ext={0x1, 0x20}, 0x8000, 0x86, 0xfffff801, 0x2, 0x7f, 0x89f, 0x1, 0x0, 0x10000, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r1, 0x8) [ 2117.800844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2117.802811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.804554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="fd762100"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x17}, 0x1000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2117.859939] loop1: detected capacity change from 0 to 262144 [ 2117.883044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.965068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2118.003066] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 2118.081887] loop1: detected capacity change from 0 to 262144 [ 2118.099824] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 12:12:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:12:38 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)=ANY=[]) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x44000, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000200)="2ed5ac2ac24cdfc58903401763bc72c2262fa19cd3270f9a0c669f2ab3f0da967d3d1fd2f1335385fd603bfe043e8d261398", 0x32}, {&(0x7f0000000240)="a5c798639b3d43878f9ff39fa13af2a5ed1396ca750ac75602bfff33458aa7202d41a7f876c09a46da4a98b23992bc8e9f5e69ff9e129c67468abb2fb3d8c4e0c15c997bb628c67d79b0c17d0eda6228669deebe5d9ac5dd4cd6775e54648315cc8a38c598f0c824f5b1492faddf9bbe8f0e6dd955bd6d5fe2d3554ad2e01fe4dae90e8a045928f6230c1fca6f08d7bc7b6fd574dba7c5b3c274260e4cb468d5019f8a7b56366fe15044bfc962ef96fc66afe1f2a06461549615ed28d449660362bf83488071699182ec9cda867606536bd0ea3eceefb52b1e7c01576e45635461c877fc9b36ab817c306a2922f01935df9b2a", 0xf3}, {&(0x7f0000000340)="2f880d039a932c612d52227f8cd98c891fe2cc0d75c764bf3568bed0b06c66e03a8f89673db3f2577f9e303fd4cd033158ee4a1e9923ceabe09e59118cf3960d75a482a076f94a5d4b53c38a138c94e6d3deb4a5520e46c0347a9177620227b54dea7b33d9c2296864ab43fbc6dea920585fbf280f85b34ba13a4ec609694083234c736878effd30909ddefcebea3ab6815e1109efdca1cefdca8cc3253072065c08d90e520993d957f6b5bf0af8f9d4ecf9b9793913e3222f6d4e1ab3ac9d7ec2171486a8e6b0fd3039291e38717aa0f4ae4aabbf7ecefa82379f4acf303259085ac74f67c5b1101d38372033c8ac5073606dc3ac79", 0xf6}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000440)="7aa83432ac11ead1749e94c73145d5e590f6adb38ea8a88cabd6f79123998093343113f7cef64436a38265ba2bbfc9a1e2eaa11ba4f291844022b45f654cb20b9bfc9044fe80324790ef4e3dcd23c6196a88d153ca369bb7d55bdadce2f3060712effc21eff9c91b51512a792457ec62da76771f1d5b2f9b2dea09ea8c910b20bc27c061150f22999e25157d37e94ecde51772b2627deac1f0c0c8ed02231fabb47b296365068f4b2420cbcd7a9661f65a4888b0aaeba778593b5550b6d74415573f61f457944ac35894baa4b6f7d1b875f3c2975a0957209461f256d69cd2f3c46f", 0xe2}, {&(0x7f0000001000)="b0dc10d2bb62a7cb76724b5dac17de9a0a9a7e0bfb0cbd73015bdb853ff1eab8d7f9158a8c65514f9c0ac5ead59d3661146fd06ce7cf907604d7273ccfca89938a018a3ae935f1f639027ce95b", 0x4d}], 0x6}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x48020200) 12:12:38 executing program 1: rt_sigreturn() r0 = syz_io_uring_setup(0x8c3, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$hiddev(&(0x7f0000000000), 0x8001, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x20c, 0x31, 0x2, 0x70bd2c, 0x25dfdbfe, {0xa}, [@nested={0x1e9, 0x51, 0x0, 0x1, [@generic="0b16d02582860120ddad3c20053a6af2ba31638758cb1c864c798a48884b870ed84ebf9cdb1d840b5f2b99ebab59862a737e508508f04c72d4f928c54235c2c9", @generic="2cd54b90ca195326391dee298fc56730778ca437d830dd307d1a2a8e8cbcc1d680709d8a47badbf1456ee4116f5dfca8cdda18aa45c9897c20759a1bae1decc93981387f8be507fc0601d9bbbac79e677072021f172cf84e2d26182e5b5f95a6d6a30d5f73f0820d6c0b9b7fe0890101c321bdf9aff502299d80385ece3534741c8b550295330d215e572d6f6b2598763238c9463b70ac27473b559eecd295371b56173f904ee02088b0adbbbe6c6ae7c312adfe78c84c84e6c448606cdd47ce974a7ba8ecaaf59452cdf2c8206990c7042932b533158af566e43a26afd28bb66d35845aa4313fcac75f767277d74fe075c8258bd4677f3ac8", @generic="fbe41ca57b8cc82b5779a045eb9ec22c8c0b77a10a37a0019b4827cc20822519f649f1183c93958f91cb8d65e76947bd56a53a81e832de6fef4a1489a9097e66c3b559365a34c2f31cd44d92444c77d23c044cd544f9308b", @typed={0x15, 0x27, 0x0, 0x0, @str='/dev/usb/hiddev#\x00'}, @typed={0x6, 0x7c, 0x0, 0x0, @str='!\x00'}, @typed={0x8, 0x27, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x15, 0x4d, 0x0, 0x0, @str='/dev/usb/hiddev#\x00'}, @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, @generic]}, @nested={0xc, 0x6b, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4000, @fd=r2, 0x4, 0xdca, 0x3, 0xc, 0x1, {0x3, r3}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x8) 12:12:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) move_mount(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x20) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = signalfd4(r4, &(0x7f0000000140)={[0x8]}, 0x8, 0x81800) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7}, './file0/file0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r8 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r8, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7fff, 0x6}}, './file0\x00'}) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="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", 0x1000, 0xdb3f) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa8, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x0, 0x1, 0x8, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x3d}, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r7 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x1, r11}}, 0x2) 12:12:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, r2, 0x100) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=@v3={0x3000000, [{0x9, 0x8}, {0x2, 0x3}], r1}, 0x18, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29, 0x0) 12:12:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2132.828931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2132.848071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2132.862673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2132.892839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) fcntl$setown(r0, 0x8, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2132.915740] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:12:38 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) getpeername$unix(r3, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) [ 2132.961489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2132.963068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2132.964608] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:38 executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001100), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1000000005, r0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/pm_print_times', 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x4, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffffffc1, 0x4, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x2, 0x7fff, 0x0, 0x6, 0x8, 0x9, 0x40, 0x0, 0x20, 0x0, 0xf07}, 0xffffffffffffffff, 0xb, r3, 0x8) r4 = accept$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) fcntl$setlease(r2, 0x400, 0x3) pipe(&(0x7f00000002c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x4, r5}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f00000000c0)=@ceph_nfs_confh={0x10, 0x2, {0xd75}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r6, {0x8}}, './file1\x00'}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 12:12:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r4, 0x0, r3) dup3(r0, r4, 0x80000) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r9}}, 0x9) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010005000100e7001800000026821b0059d80df5243d0c65651fc7776ea2db948d492bab578a1bf5f8e8dba22f3500000000000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2133.193057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2133.211373] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2133.346903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2133.348453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2133.351436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000280)) bind$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f666901001482"]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000000240)={0x0, 0x29, 0x4, @tid=r5}, &(0x7f0000000040)) dup3(0xffffffffffffffff, r0, 0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r6, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x6, 0x8, 0x7, 0x7f, 0x0, 0xd6, 0x44592, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x4e290, 0x72b6da63, 0x2, 0x2, 0x200, 0x11e19664, 0x1, 0x0, 0x10001, 0x0, 0xd2}, r5, 0x6, r6, 0x8) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:53 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6, 0x5, 0x8f, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x24080, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f00000000c0)={{r4}, {@void, @max}}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:53 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) bind$unix(r0, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:12:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:12:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_STAT(0x0, 0x3, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) sendfile(r0, r2, &(0x7f00000000c0)=0xeaf9, 0x4ed) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 12:12:53 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x107, 0x6, 0x3, 0x52, 0x1ca, 0x100, 0x96, 0x7f}, "da115cc33b4632e4151a05b7437d0c2c1521e598ac142410ff0ef6b3cbe2c35d23fc0790051abd93c31e7b9f89c1da5026d3175616db832a8e8ab0c232c1c35f9ab4dc5c04d698163722a37190736f39903da77d0a1ed02368116a2fb6a0f16d964213c0ecf478dfb49d21f67d01a178745d6ab8e199f3c11112b59aada686502666cd7b47f6ee2be6423781b8ed0c343856e64d5c079df0630da860d49663744ba7845498425b192f33ebd97012ee37d69334869ecba6dce57d0ba779578658c130e50209c4076cb8ff", ['\x00', '\x00', '\x00']}, 0x3ea) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2148.003138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2148.023902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.046734] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:12:53 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)=ANY=[]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x8, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) [ 2148.078080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.102796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00513566695f653000210900000000000e42b6964e8f91f4835f36d96d44d0d1820e56a71b233b4036418c5fa063f95967336869bf0214746dc2676c6621ac1704a36df0e0c07c1b2866dcac87ca380d364cb045623be482fa3a7d9b7a8893aca233be96c6"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./fi~e0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2148.141679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.143285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.145114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:53 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2e2f6669826530efe8c50b87e9a7bdde06001c5b917e86774cd43b08"], &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ext3\x00', 0x0, 0x0) 12:12:53 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:12:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x10, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x2, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000001980)={0x254, 0x1e, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@generic="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", @nested={0x90, 0x8, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x69, 0x0, 0x0, @uid}, @generic="074bc3da3bcb7481ad7fb32183efae47abe889965b5c5f5ee00f8ac40bdfc377f6dc22820c4dcd563c7b8e78cff17a43e400371a8f8aa3066b42143e3f6ce7c7779d5849e16af793ef31fecbfbc6382156c393a47a1f6e4b7211761f908f0867a9b37f52035d9f2a7b934e2de4a0db46916fba90"]}, @generic="3cc1e4dab070b7bb721e1e333c0aca9fffa768b3135282377e7f8920c9dbd5a8952fca23cf9c5a57633ea405403cfaf7385e6ce5fc34f156782376b2c194a0b121b63db5193ad04b8d4c76500756dd585c34a8b71ea1cf4cb76d6ceae5a23ce63d845f844f0792fc9f63b43d3985e1d783767552ee17cee05b87bd6ae3cdb7a6943a0f3015f00b47b4fd4ab16f0149b471d7497f", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x2}]}, 0x254}, 0x1, 0x0, 0x0, 0x40}, 0x4004404) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) linkat(r5, &(0x7f0000000080)='./file0\x00', r6, &(0x7f0000000100)='./file0\x00', 0x0) syz_io_uring_complete(r1) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000014c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x41}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x14}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:12:53 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="efffffff0000001e000000696c653000bc02a0c517f7f0d0b7390564c5c64579872f56a239041e0698e203af6a1ba75adec543335b9b41ee219cc3145efff84e3f0064debed5df43decef33201f4e9bf35b8dbc4ccd070f89bdd928c"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:12:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 2148.425480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:12:53 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x48c0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@euid_eq={'euid', 0x3d, r1}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '$$:{!'}}, {@fowner_lt={'fowner<', r5}}, {@fowner_gt={'fowner>', r1}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x31, 0x66, 0x30, 0x37, 0x33, 0x39, 0x66], 0x2d, [0x66, 0x34, 0x36, 0x37], 0x2d, [0x66, 0x33, 0x32, 0x36], 0x2d, [0x36, 0x32, 0x30, 0x37], 0x2d, [0x62, 0x34, 0x62, 0x38, 0x66, 0x66, 0x32, 0x32]}}}, {@fsname={'fsname', 0x3d, ']$:/,]^$,+'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, 'system_u:object_r:syslogd_var_lib_t:s0\x00'}}]}}) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:12:53 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000000200)=""/177, 0xb1}, {&(0x7f0000000400)=""/79, 0x4f}, {&(0x7f0000000480)=""/10, 0xa}, {&(0x7f00000004c0)=""/138, 0x8a}, {&(0x7f0000001000)=""/33, 0x21}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x6, 0x2, 0x7950, 0x12) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="ecffffff0000000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2148.535768] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2148.553646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:12:53 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000fffffdfd02010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01de2795c26a754564e0e120"]) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bbfbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d076750000"]}) syz_io_uring_setup(0x61b6, &(0x7f0000000480)={0x0, 0x2560}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x8) unshare(0x48020200) 12:12:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/usbcore', 0x480, 0xc0) r2 = dup2(r0, r0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) dup2(r2, r3) openat(r1, &(0x7f0000000240)='./file0\x00', 0x10d941, 0x20) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef) writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)="967e6e323f3dd4d9c74af6c7ad7d490fad03e84ad1a1c869e253cb7f24b6656b991adff15b5e2f258ead4ed1836f472b6770e55807", 0x35}], 0x1) syz_io_uring_complete(r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2148.590562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2148.592221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2148.597664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2148.677548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2148.744032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:12:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/35, 0x23}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/44, 0x2c}, {&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/195, 0xc3}], 0x7, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x20, &(0x7f0000000600)={r1, r2+10000000}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = pidfd_getfd(r0, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x7f, 0x8, 0xaa, 0x0, 0x7, 0x42000, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0xfff}, 0x4, 0x8000, 0x7605418f, 0x1, 0x20, 0x6, 0x3f, 0x0, 0x7c, 0x0, 0x3ff}, 0xffffffffffffffff, 0xb, r4, 0xef3dd858dd4abe0e) socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:08 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:13:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:13:08 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:13:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x148) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="300000000071a0f64ef13da38a8a0d0ef62a7cce7a523a9c48469a97d10056a4c27c4e630dd760be0bd36ba9f2643b2ca7cd861a9f23799642b2b77cf189deb5c7bf7c59ca34846129e373747698ce0a697ab07a4c0e7b1b06b37d7bf167e85eac46040a0dc711"], 0x8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000380)=@v2={0x2000000, [{0x0, 0x1}]}, 0x14, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x0, 0x0, 0x8, 0x1c, 0x7, &(0x7f0000000640)="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"}) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) r2 = open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x80000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000047c0)={'ip6gre0\x00', &(0x7f0000004740)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x9, 0x48, 0x2, @remote, @loopback, 0x7801, 0x7, 0x6, 0xffff7ffd}}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc4}}) symlinkat(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00') setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x20}}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 12:13:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="76d542d21813370cd0f7dc7f6d6b79877aa123bb5280e10e9573f45241efcfcd", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000d, 0x2010, r2, 0xf9732000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:13:08 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) preadv(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000500)=""/71, 0x47}], 0x2, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010001000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x492fe9846f25a6e3, 0x400, 0x1}, 0x7fff) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:13:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000001780)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/108, 0x6c}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000001000)=""/151, 0x97}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f00000010c0)=""/250, 0xfa}, {&(0x7f00000011c0)=""/160, 0xa0}], 0xa, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001340)=""/130, 0x82}], 0x1}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/157, 0x9d}, {&(0x7f0000001580)=""/95, 0xfffffffffffffed9}], 0x2, &(0x7f0000001640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001800)=""/107}], 0x0, &(0x7f00000018c0)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000003840)=""/196}, {&(0x7f00000019c0)=""/69}, {&(0x7f0000001a40)=""/228}, {&(0x7f0000001b40)=""/185}, {&(0x7f0000001c00)=""/249}, {&(0x7f00000016c0)=""/30}, {&(0x7f0000001e00)=""/217}, {&(0x7f0000001d40)=""/46}, {&(0x7f0000001f00)=""/96}, {&(0x7f0000001f80)=""/60}], 0x0, &(0x7f0000002080)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}, {{&(0x7f0000002140)=@abs, 0x0, &(0x7f0000003600)=[{&(0x7f0000001700)=""/61}, {&(0x7f0000002200)=""/247}, {&(0x7f0000002300)=""/89}, {&(0x7f0000002380)=""/247}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/67}, {&(0x7f0000002540)=""/170}, {&(0x7f0000002600)=""/4096}], 0x0, &(0x7f0000003680)=[@rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}]}}], 0x3, 0x10000, &(0x7f00000017c0)={r2, r3+10000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2163.198901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.210915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.223661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2163.270423] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:08 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = io_uring_setup(0x110d, &(0x7f0000000140)={0x0, 0x2954, 0x0, 0x0, 0x142, 0x0, r1}) pread64(r2, &(0x7f00000001c0)=""/251, 0xfb, 0x5) [ 2163.307478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.309050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.311551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:13:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r0, 0x5328) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2163.404188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:13:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000140)={@empty, @local}, &(0x7f0000000180)=0xc) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0x0, 0x8, 0x9, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:08 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:13:08 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000040eafb44579541643ff0c5553bcdf54742e2f66021d2e696c2542380931069296d41add980ea644a5996f52ebf589dcf4223447341cffc1a57ee27baa2f0186f240420200000000000000453baa3e341c21a0a68679ff9bd1c536482102dafb36c0c85f97b210fed8ff6df6765e3ac97bd21ac42be770b1d1efae93cff6af2e5d9e46193eee836bb7116515d549fde78288a4666a36e79102ae2cd4500e5788517973aae209971497f3f26185555c0d34f302931d8eb4165304fe6000"/210]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x10400, 0x10a) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2163.598147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2163.678582] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:09 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 2163.771560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2163.773215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2163.774906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2163.794844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.813878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2163.827783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.665685] Bluetooth: hci4: command 0x0409 tx timeout [ 2170.712377] Bluetooth: hci4: command 0x041b tx timeout [ 2172.761244] Bluetooth: hci4: command 0x040f tx timeout [ 2173.543608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.545382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.548339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2173.633673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.635705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.640033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2173.839152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2173.851039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2174.811446] Bluetooth: hci4: command 0x0419 tx timeout 12:13:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:13:36 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) unshare(0x48020200) 12:13:36 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:36 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="0000000000faffc8fdf0a224c55fe37caa435bf8f1b8ad41e290ab83b18600c6"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="b2ab26d287828409180000002623bfa79091c3a5266882954569a10a8b5c41b8bf37c3b0081f2e708feea324796bfceba1de716994b61e0a49c669ea61cf10083edffb43b302cf5c9be2daf24177d7e31e3509", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xfe98c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x112, 0x0, 0x1f, 0x3, 0x4000004, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7, @mcast2, 0x7fffffff}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="06b5b42dba672181", 0x8}, {&(0x7f0000001e00)="d197cf456f11bc729305b5e0813dadc7e6cbb53cb786e5a47e14397b92c40786742a0407ec62bc3bf1710c3dbfdf274c0bcbb55fc4e256df0ba2ce516e5ec1ce625e796daf941339cf1296bd42e3010d946f07e7c69de5d0c3ec665e6d16e0f99c586157132a792aaf06f61d7d4f272610d9297bb2da3aacca5adbbaefee963a35c18056a37364c1cfe5765e61502ae39950ce89613352cc665757dcd3afcb39426747dc7b6133b9871e879bcff24864524aded795939e471bf372a448f30be7a6f3a64cf371561576812adf3a164451536718351bf03566a55e9e32b185fc8e1d44c4f5c806ddc7453e0b91df8d7f63d21ac374d1d470699b7f4e1ece0cb06ecb66f5fdb41aa5c65af15248bfb12abfb0542ee8ab5a9dbdbb7c75f776fcd0d7dae5ce9918c91134b8cb088bd96cee5120d81fc4d0aaeac415abece6a888f78a068f6bc47ce442b63c6fca357202802eaebf806b150cb81bee7e56e025e5cbf4f7eaaafdea4bc8b14b6a453af5ed9284336686681390977a009d7b0f605c6172648c8b040d4505c635875604d79cb63cbd3bfd51bbcf56537dccfbebd48efaecdbc84cfd450809dd32154243f6b8f1599130ad2ae8a61929f347c9c3e4fb7bfe3b371ffa7bf60af05ab2f228f26f41acf26b9139822a9c53035e942a8ca3ea6595c59e41161829e104b759a67d65f1e4e141868a23518c80eb4fee276d4e84e508bdb9e4f8477fcf2865f8cf9e387676141eee385aa4a5613a91e5d728c1c7dcffbcff3b0b3e57b16d2229885a1dddc866a82261ce6d5377f32624a8047d433639e4a279abcdddf294d3a0c6906a2c8b6bf63074cb32986f71a4904c99990551c57d05f07dd27f4c21a45fd71dd3acb2bfac276283cfef47c684e5d7fefc7307ae376d72cbcfcb88ec0cdb3aee87a96d3e1aec4fe76325116804d9c463996a189b37a9ade5ce092666148a3eced69c8e5be3b0139b2bd8cdc99973af59d7b18eb2f387c15561d0c82fe96547120c218bd765b2d2d5b6a2d54b356ce11788a9776d73c135ade7ec6b3879bcf57ab68783b6644f007469e48f385c932d55489e334c291e02eb570a139f73ebbe19b5b3d72fe7944e77978f9ac39a0a41c3a9201d6abb6be2aab0ba1ce3657120ed6d131b4417f11b2b41a4fc0f0c55db0d57abfb0c2b9eea68ac3598b5feb7043583e11550fc59734e1c367972e3f16ed340d9f7f161f4e48e71f8f361c4ec4ffdc359b5a6f466b04a1a8f3bc8979bd6d4edaa86978d463f2c9503a812cf10bf43ed4e94dfcdfc3e1db593e033d9f383c3e612affda9de6934291a618133394cc7e4c718d81ca2beba9deaf7a4bcf4af239aca937906e19a5e64dc24370ed3689cec5be5f4385b9b51ecdcd066abf8c5a3747e8618636abf17db7cd85da13a447dcdc567b26ac47c04033b69383464908475a3624c036295087e4617a47a9f89e547a23063f95406a80580fd5b6837d0ba94b4ee0e4ee210448288e94db5c3fcb005551288fbf4ee0c4604bd7a788ffdc4d7d2a8e0e25908335522a9b369b3d240ff3c8d3c93b5c13bf52c21e8a4262553ba68e9d20ae052bbcdeb5fdf6ab290a649b6ed15df9a4f8934d33384479c1511c59f5871a52f72efa2ccfd5ef21ff6f3b1b6112eb9ef15ad7f0cf7ce3777143c862387798247a80bfaa828b4d3a083eeef717da62d1eaa9bcd998b06117fd3e6cc358d96dd0d209039ea0b9c03931182d04c8a40a169646a4daba3a91de6d26510f30a1d62aa276a1c74c8dd41e6e74d4ce2bda004b351233cede4dd36669edee8e5609f5c18a94b0d2aa17dc27333672004ff46fc16fec0e14b10b11829f96197d55424ebbaa96778ceafe7c0b049dcdc208b54c120b7c6e757d31eba97da855a7cc2854a31a1d5f8b23d37366e0ab44b5b890d30e2cd7118e45b054696091bdf3288b75b95a0184509cb95d4633fdb079198d1675958e94a68aff9e9ab7539c66721a881c144ff4350b798f567898224e0e47063c05bb3939edb09b3cd2d4d9facc33ccca457c1e318c2f6863cac981d9b7484d2f695c442741a0ba54273c3c8e763df9b11ad1b94c0fa50f2617c963f81dc81fd8e583a2075b2a237d968ff2c56e41786e095fa6df6bd72b9dc29bfb3a4d3d719a1c8ddfdfda8a1d0c5a9cd5ffce0667f6de77a3d9e6e1817822d82a600bd7d421bd2473505ce5d727297cd32b37d05279775629c06831f8580c6e5bc7cca8c80860c954349345adf8654be5b6338efbe81389242c0b47459ff15a74bc12f2d49c635a51062eb719cc7f38058aea78c70c5eb4bb82f89d6a5d07b51bd1096820b613ea698436534cca41dd48ff5a0e6b3779edb7133b665bde65b7a8ed8ef1d9d6fce8a0400ca2f28f32c6155cdc1c6c96cf4b0d63d5144bd860e2c892de956f18edf4dee0500661cac8f6701066e7f6425b163b0a25384bd36e8bd7ab5fd4379ea9ae1eec74541ec0872423698f381b06f7dfa061dd3a5c22ecd19b53e859e069c8d140765c4f5e9ce18b0e33b1e551fc2adc28625b17c4254b3993fdda30d852a09b514c9a48097ea68f9b833979b8a62ac0b3140a1d2f184f5671abcf41e6f8c01c30e3fafa00557e6d6d9c6992d37a7f1280a0c267641c7d3a1a119043da20fa5747f279debdaf8ddfd8dab618c45f31243d0b2dfade5cf2e138457f4a4a26f85cc97c8e1a1009e3112261234823db4c9b674482a25e41681faf51b4a62076a3d8632455270fc976cb6f7515e394e3f45c63d4138019e33a877bddedaf1a997de0c95314298dbc6a2ed5e12e444ec92a62556b99ad5c95c8796f999d8d5d8bd0ffbcc5f9b3d30336faf249b5e7e04beeade32a5603ba9768a97221a0857420c231198e2278673ef7b6dc6787a52425e5e712dca5b4b319667364c58bff14bb486f037a03157beb5177b80a2bc3e1f32459d750e1a97e21480a87b94b49429e29dcc81e4e3d9ab598321befed37aff04876fb9cbb2697d2f17997bac9eb3ceff85ef26b2aef63beb94339d817f84ab8a8ae312ee3fb46d077a84fe4b28a3a7173b47489e1051207c9d61c7025d1b3b18d122d21be86622c684ee8ff19eb409494a0d00a8a30aac38d5dd5d2e0a08e43ffd7f46e7baab6f113fb778277fa80084e5562828b3d4c891b30025656a4bb694e2963c1f08e769571760fef594f0a62a383f69bbee6679e730168c9a808b4c7698812f82c459248caefe8813b8fceed349efdffdd5892ed5d7df64e3e1d1c336bdf94eea27e40d811c059bafcf6ce022ac4c762e3078f7c1fd683cbad72416fd1836928a25ee8da67292317ee53629b9133465bb5006a05456b6406e166503a7dca4ea5489a50779733960449cda178d198ed47ec19b3796dffbd59902bd757cc20b15d82ef04bef84d310418f05aeb43f9facb76ed69ed60133b795e6b30553236d88ea7101d515e4b81dbb21cca83ddbdf6282bcedbd089d5eb5291ed55cfa725419261fe4d180d976f6616bac1889b47da6e4d294a34d0fcd63d9b3c49b12c7b50808d698a4f7a538571a090dba3c617a5e1dc108869b6a3e723277d2a46fe1ad8894e1d37dfbe12631d7fc88f68afccbc681f2c0f19042a550e64d073c3499863017fe74bdd74d95be3fd58b68a143532b908302abaf6f7b1880f4bbff874802061003fad47e58f6011590afe125f9e4952ec75522fd56962e90fdeaf4149846dac6f6fa7c2aeb78d148c6597127b8758611dbfd9583e739b1da96df3975fe465830c9f2319ecc2b53948a4e72fc6cf9ab462feda6626b0576cc80ae37f451b5adc74f50ea1f7f7cc76b291095a320a5526cc31d5b5937a2b6f13620d12fac94ab14ec391cd5a2180b54dcedd4e1e99807c81d5bcf66b377f876e51637a36cc76be598409c1ed10d188c7c5adcd7591054185af61442586c3ab53645258c5e34954684e3cf0b8af92f10e7801bee7ce1562b9f8e0c52d83e543bdfe1c7f40943b2802d62d23147bacccf8e4d8b228ac2aee3ebc70671d773fa288a8c204b387f723378ec59c30f6d70ad709ae538c7b2bef4777ce10595e49082a0dd267aa628675987ebe2d0fbdeaae78debbd3d037743b05025d0540a505cb21a89902f21075fadf6e97eb18982e980477701e5c2747489a9c1b32f0709e62ab9a14c8b32ff83d134bd9419f59c835c02a9684b28b770fecdefa541d5bfebded12db771470bfadc12ca96ce9297e653cc4eadeabe81126caf24d0fcd077b20e12526997edfe7136b8684a543ac3b8877b93cb7642197fd9bc37179e5188a3ff3f82ae0045e2fac51a300bf8fa76285b81de83006cc0b7513441eb6c6a3f224de6437b8e4396077510710ee5c9cf9fbfe8f86a7c71af278515d1afe1feab937f932a6052d793cb847c90beaba92f8d043545c881c6979d333cff87c301819fe87f1409c7e54f46a0c7f478c22bc6bc8d0a976723456daa5a1a787c24764bc4f7eec91f57c4348e42240dfc1de9c88f323d832bd3824c98e2b0a298ed2ca102de3c46fe4ae8c88478837d400c26091e76da9bc64570c82d4b2757baeaaf232d8146f7be0091037d67f94a1a91b9a708b137425470e6ce1dd5d9a74e7d0844717d3305c3ab3117b1dc5fe1c39c27230c3c5c844fd5909944a0235fcbb55ab0903935b2871d2bf0e0ce2aa656961a19f4cc0fd425cfa6974ebde27589439bb1685f7b520d2f9418d5a38b51178e857593ff3abb2564274a5e24d0e0d7c15dc14584d61f9cd743dd95c0c5b2ef81ef173710da7001ba632cac257b91d21718e3e4c34a5bd227b65cdd21170b0b11bd309287699b0385a83b7be62ed34650007f029c6ed28b7067f8edd7bceda9c4df431a524579ebaa1a721879092a7ed491e3f11abe5dcf6353f48010cf0965a75a9d4e7278227ec5fca6bdfcf56583d5f1b68bbf5301156d6dd722b5370927b6c85a0bba6c0434c177d5b3cd8cc99e25e11659233bc7727577467b13be5759d7fff2c4b8f435ea851fa6a05a9d1311caa60e4ec5dea91082d4146a795eb778c052de0c92e29dfeb0d49cefaebecfe82c5605f7c5fac7466ddaa073608879441cda810534ad293dccb0a78585c75b4de7053783a652a45213639881178c1a3411841649c118a196dff0c2b751f8dc50410a921676938971469c5df2c6568789cc8e413e65a2cd5b3ee86ead126303787551df7e79cae429471bb0b08b573cb9101fa03feb94d94efc208e7d03a86ccea86f72c3ae7da5ccc33de5f79409c8d527031ee8275f87df96faf128bc1056cd6629fa85cd8781e96315424784f06d27af9cad449556bb245bda18313d2db32d9e028c51f9838c5cf8f50517d7db89e788ee704897a7679af4c20f282cb65744867802d001fff37fd24ea41e24d8de1f37d3c4842960a4ee804a025f92d119a128e47f5f538aa19e8fb35203e8f9d961a1d35eb72e084e372d3bf7754c08d6f74d604cfe383971d46fe36283e4668af8750b1174e02ba17ae3aca839a57657d08ec2144f7f73a0bec1cfd191e1f84f736a5aff5f264bb85817deeb1bd53cdfca257df6a0bab8b0fdf057bd1139637a91fdeae5deb934f04950917ad4816c2efe17d16525150a31b091d9b64f43b598edbebfa6839d1f7e602ff0e90b7325dce0ee0be7e2328232af96f2d8133fc81b688a97bc81ee688b07919f9029755837be282e9e49b267e12c8c53c8efee2ad7770de11ddf97726f36766b0e7f21025a5d786cdf8a07f576caeee94320f7361bff9f23c77548237db87b790ba014895cb410ee5f83d82a", 0x1000}, {&(0x7f0000000440)="576db7979bf8cf6a82ef39cb57be631564661f8fb298fe42b82d82f2f67ac4af73b70b34a461aef6402505f36d24f7f41683bd21f878549e8359d752893b234ef71722975cee18226dcfa7321c7150925ebf804fb1e07bc97052c459", 0x5c}], 0x3, &(0x7f0000001000)=[@rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x1, 0x7f, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x84, 0x6, 0x1, 0x1, 0x0, [@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @pad1]}}}, @rthdrdstopts={{0x198, 0x29, 0x37, {0x5e, 0x2f, '\x00', [@generic={0x81, 0xd2, "23414f1c80b21247ddc86e8ade8bb6de4c1ad1cc985af980e67fa4cc5c3d3f33745c63a289e9d78161975407ea8fd50dc5df11ff314e03822899a995fcca0ce1cebec0909181b00b50bd32f4d9944fd1ed7489aae54bc997d1f6d4e9bd58b3b7591b7c3efb199a20edb301c52959916f86bf9ce3c18be8e727f9102604e6ecf6459935a896ff17af2862088337f777bb6d5157a9f3b0fe16fca2cc2231d3bb0103e461a8792812824f272781cda725bf612a2d9d547a45cf5cf1a5bb64bfb8655f101bc0aa638d266da8a94eb6d2d86ab056"}, @pad1, @generic={0x7d, 0x9a, "9add7463e072e572ff96937133f6affd67cf7ea9a3e8a8b7ed41c4d42664cf030535fccfc85615d94ef1d33e7aa048d06a3d1de2649e16d189afb02a1943ee83950f3c47b7026a14823047b7408d0342ecdb9d6e235e67d6c765c9c68d487987891c3f6bff9ef251c84cb78e1ae51b98fd88d29e805fe736e9c83fd93aef06e55cbbc0dc24b66477d4bdc3d678efd66b5b2d8e2a23679a9d4055"}, @enc_lim, @pad1, @ra={0x5, 0x2, 0x8}]}}}, @hopopts_2292={{0x148, 0x29, 0x36, {0x1d, 0x26, '\x00', [@ra={0x5, 0x2, 0x9d}, @generic={0x4, 0xf2, "b3279d87e6e1aead09d413da08ee44ec806998ecdc987af036d0666904f15b1127553a7da91977486cd53318356241b5283c0f81f6992888b7ac7be3cd3cb822b82ba9c680fcd7f2f52762c778b915f6d18f9dd23fb0b70c2d07c1a0f33423e0125ce185bb08ebf9f5b160f5344b066f3d697ba98f1de7fbb1aa66a499ef6e00536a73e82c792ef141cacb772f786d2aef335834692c3a361fdd9b480ab13488093f0716a919687da09afb050ec9d0770e38f5d695fe86688dd7709f89699309dc72f8301a676b8f5af6e0d07b67e9fb101da2a879e47112990cf6f682fcd1cd3da9561dbb32a99b6003868709248618d7d8"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @enc_lim={0x4, 0x1, 0xf9}, @enc_lim={0x4, 0x1, 0xff}, @jumbo, @generic={0x1, 0x4, "e5cf7cc0"}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x5, [0x1, 0x9]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x44a}}, @flowinfo={{0x14, 0x29, 0xb, 0xe92d}}], 0x3e8}}, {{&(0x7f0000000500)={0xa, 0x4e23, 0x80000, @empty, 0x40}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000540)="eb22486c5d35626284090789b011b857db8e9388c64b3f9a5a2165f4dd9f6111ba82654352fc26c1131d36e34c065cf120", 0x31}, {&(0x7f0000001400)="31d95af3cbd6ce0309ae99005080ba0a47c7fa3d36b71311e8e7264483a3bdfc0b954c359cc5da9b338337552d8678d85b674757124101", 0x37}, {&(0x7f0000001440)="72bf94f6a2051799262a60902b0ef4ad5a500f600a052d19847d37595fa70e47098361ee5dd18a50de642024695d45d8fcac8851ba925e9bab79983d4d81f4f7f3e5cc0e67ca9309bb37f3ecb5d87b35daa4adac1459abfde4fc4136d931c67f58ccf6877fe8558109bfe14745fe7398880fbc756515d479b3a93da47af07e1e7def4e80f9bd55f0", 0x88}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f0000001500)="1fde229c766e93e0751f845f9d97fcb4282b0aba5c8ca4710f024adb92d49d7766e90d0e4e4e01f4ad75828ce07840a2e33bfef98e8c95b7cf1f4f89c5c8278487cd284b97bfab4a5529be0acc0165c513d0b5141369ab312352eab9fe4204af8b7ebd18e8aa9124200c98d405f49b1c12dc15de94334a4547be85b1c8ce61c6a0d4b174d65f1031b7d6c9365068620e17446e2cc0bfe6a07bd6bbe42990cdd7ed6d1f92c78f76ad3ff1bfd5458e89261e320fef99dd20a73e2c0cc47f64260c56b1ed579138fb3f67c004eae6236aead4a7612ab075ddafefe66aa693bb", 0xde}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000001600)="a94998f1e96ae0", 0x7}], 0x7}}, {{&(0x7f00000016c0)={0xa, 0x4e20, 0x6, @mcast1, 0x7fffffff}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001700)="b41543f0f466d3d842cfe2465d14c5de984b51a7d7a63689e44927c3fd5e4b631e30f7eb3d4606b3a1bd6de0dcffbd143e0dab8e7e736f859dedd0e2631749639a7851a0b51857a66561f3e9c077888239e2ca506d49864352e3a87e54ae98f7c97c9b15646743eec109869758f725a649d523576dfff9a8be3f814943ad32043637b5ab55aa40131d400141d4bf142de6f2141f7e2ecb53da78eb4828bb071ece3ab68521ae7702f1b722b359f5fe521006e2de31c1eb891311dc8d69f80b1c1f1394b24ceeea09690682e1db473e422cc3a65bcfa71ae1", 0xd8}], 0x1, &(0x7f0000004f00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/277], 0x340}}, {{&(0x7f0000001b80)={0xa, 0x4e22, 0x6, @remote, 0x1f}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="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", 0xff}], 0x1, &(0x7f0000001d00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x18}}], 0x4, 0x40000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000001d40)=0xfffffffffffffe90) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80080, 0x8) 12:13:36 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:13:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:13:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, &(0x7f0000000000)='cpuset_v2_mode') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0xc86, 0x9, &(0x7f0000001600)=[{&(0x7f0000000200)="bef4c6ab1cbc451fe3e6c41d69f3b159f52a2c1fed91e8c4f2531407570684f5b6606a80e10c46c2309dfdbe2b7dff97889ad7c6d1ce4f23409f58247ce4ab0f9fbb960fc803d43ccda3e310d002259835e945f56bc7d9fe1fdd6e2aba095ef8592fd93bfac3128887c0f0a17c4804f9551f3bf0a33164dcab1961418d9ef8af663ebd83f38e099cca09e149d91eb240f8bc6a2b8cef7308ee6f01b6293e74b97a0db2a035b887dd0da960032036129dd7279e30fbeed7ca431b21d450a14be007b87d074a9c3a75227976b723fe571ad4d630cc8fc6b6f12d19927126cd63f57035fb60515803a1f7103be3347cfe01d979fa", 0xf3, 0x8000}, {&(0x7f0000000300)="9a5923615b137f6f10047af213d891d23d9ed47310ad452b7a72b44d06d721", 0x1f}, {&(0x7f0000000340)="13d426556b0f40cb989b3cbbcd8b5a8ffc4c49ad99cb7e644a50a56f33b093dadb40bdaa47c805", 0x27, 0x4}, {&(0x7f0000000380)="e17381b14d", 0x5, 0x5}, {&(0x7f00000003c0)="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", 0x1000, 0x3}, {&(0x7f00000013c0)="c8fb76bb9cd8c8a9bf0722004e261089bc7133575b84f7a72ab0fa6b05e704e16678a39332f65bf1a1562f23e829ce7cb8392dd789abffdf9a32fa9b385f480910eebb0cd358e0bfcfd3d8b5217c249ca9c2a7f19427729b6c6e7bad065ee4e4900e62f8a3ba698edf627317b4d69acda5d72294c1362c3819505e736e7a8dd87177669f1693d21bd22c5733329d2af947", 0x91, 0x1}, {&(0x7f0000001480)="cedcd67f1ae7c0ec2a07942f963a87d3e0767acf038e39a1d97de6013c3b7b62438fcc2f5a4ab7f86ce1d2d49caa596a011a35c21b4be8045853dbe2eef283499958bdff51a191a8a5966f335efa4d4a3ba9d14c824731c6400c2e56271dd077171394ebf274606421405d1bf70ad389b9797c801e6e56aa81d9cd18642b84197d272d2ff0b76e0fc0ba83dba06ba60014ac0e27bf406be0e7ad04a6ecd2b463deca09169ff0f7162beef02040e2b9e67d41cb019cc126bcbdb4cb982a097036fed96f", 0xc3, 0x3ff}, {&(0x7f0000001580)="7b266b47ed937c85d98ce3d4cae24adb00ac5bfbd8e2164318c079cc9217c54ef5f4198ca37fc7f7c3569be2cd42053ff6", 0x31, 0x3}, {&(0x7f00000015c0)="8a3c58f5043362878b140c5dcd4ffe5ab2744800014ff9c632f4e6036ff1961636fd78177f7e591eafc88baed78aa154", 0x30, 0xffffffffffffffff}], 0x2000008, &(0x7f0000001740)={[{}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'cgroup\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x30, 0x63, 0x37, 0x61, 0x37, 0x66, 0x64], 0x2d, [0x31, 0x38, 0x36, 0x35], 0x2d, [0x35, 0x63, 0x63, 0x65], 0x2d, [0x30, 0x38, 0x62, 0x35], 0x2d, [0x34, 0x5c, 0x32, 0x38, 0x65, 0x64, 0x62, 0x37]}}}, {@subj_role={'subj_role', 0x3d, 'cpuset_v2_mode'}}, {@obj_type={'obj_type', 0x3d, 'cpuset_v2_mode'}}, {@subj_role={'subj_role', 0x3d, 'cgroup\x00'}}, {@dont_measure}]}) 12:13:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x8, &(0x7f0000000800)=[{&(0x7f0000000280)="f612657b753341683c9a6709a04da15b79fd400c3f30472a04448ebbd663b440235ad04a54cf040d87969bb9da40834f4af583b3a684b687660fdecf72b3c3c3d070f963369f546f3d263b9d67ab7fcbd2dc56cfc244140c2c299d15e74b1b6003ba0e8188daea55b7956c4180a30a87125cf814a0068c23599f3f072b14b9dfca40fcdd85305fadccfd5ff68db03ddab66efab9f9573fa2fe752e54a3f53eaa85388719102c8292156718186c9346bf06cedc55daf65b49c5aa3dcb8773c153ad5d323e022fdd7b45cae699888c3b7c7b916093c53fda6255b75e05", 0xdc, 0x20}, {&(0x7f0000000380)="d5a97adc54909f0f9c2322021ab1de30b5e0a16f3dfd323e695788c2908d955dc59a7a45392947a21cea2edcff8405f4f05b4f85eb2f03976b0fb795152e449cbe5f8567a738fc0bed59219ab3808ba2e4b94494703f794649362f2bf59a7091233a4833c66304a2f6c0f85b120e9c1e9f814500cc729c13889bb21bc715d7c36dbb38d2f6fe1ff2ffb379cda703657e7360184000f89e291c68955a9ec61d35e9736eaecc0a5a11e9d7164091eb4d48d154ffcb89813d9268b34e51d3f8537a532935e34f7d53c7190befa7fc5b46351fe0c1c9fe36c37b5cdceb93786a3f5fa05d35fbc80a6ad69772b9", 0xeb, 0x6}, {&(0x7f00000001c0)="954ad48f9ae33f8bcbef0f371d023980968da747503d24a0d4f116246eabf71453d0364e418e7471222d5c92b74fb3c1281799bc580cebc78c4b7c5fdf540e8c99e468def143773f7d711f6d06e32e636fc212147e24e10fe2ecc644dbfd6101d43605dc86aa44ec6b2cfe78deea", 0x6e, 0x789}, {&(0x7f0000000480)="295dd915f9b10e5ad7b6c7f88d751dd2b60bc18e83d06008bddf68d512eab5e315b05bd455070b97bf7c61b1d582a740d7d49df158348280e7aedcbad3deac6bb38ade516da1ec70d97d8c9b7d0ed5ada78639f421ed9d4191260726e8e81133852aa7a3bb97", 0x66, 0x100000001}, {&(0x7f0000000500)="790faab67de3211f759756353fb76686e4ef488c8c0a46ebc4b7d53acf367f8f773dfacc8e7cbafc893b93aaca1c4a201a413ae9c8307442db7f0bbcfbeb467bcf250d7930349a2e8a29bbe84ebbd5d43477f109b16caeaafd87d2546443ccce3f75ea7dbb620f3189d263ca02667d7ef4ba0ed1b33346bd90b9272117a3cc196f9625a99030b1a7dcde28c7a5ec22ce67ee85dedca894cb728ba6a26589bd738a28baea6f73bf4b88a010df0f9baa604bafb68fc683732bb08da90f6b6c7dfa6c782ade9f70146690ff67b55dbdc2dcc8da8a5528943cedc61458ed55011c15dc97a9", 0xe3, 0x800}, {&(0x7f0000000600)="903e73cece09ba95d513c06ee2415e98a3397084c44f4d407e672852c8324c5da05864525d47b7ae1bfc578238b6984fd468d3cf1c3e8d0fa9c2f4b9597283e095e12056a5b7cfe519d74d0efb54c414e75c85fe6f6c15333d43839e77bfce890fc205526b772169c065547aef5328f2acca18b1c0c7ef5b49100c0ce0f84fddbf3bdb3f880f26e106583e7dc7d4a7f365e5a6084ae3ca45efb56cc7541d616f7255c76cee61ac4a173c27c6fbac147708336094f1944b17952b5c56f3892462fa72758500d5a419cac3814ce46d09eed05312e9ddbdce2396a9b1d79b729fbd", 0xe0, 0x3a}, {&(0x7f0000000700)="d2153bc704443c0802af47f5d90334136558566b47a4417103833e3971bf1f00f1ebb3eb6a986e065b4685daca4818a574c82cc2aa33ab8eef539974aa21958672bf124493fd322300a52a31e4a906507ed76ae6925223b3153f82a71cdf7d4aae6493d6ff1e5ea3b7cdfd2cf1c30707748fa0225beafcd06db9849913b9eed5d3e2f4d64034eeaea57f62162d9f4de285c912468967a91251fca10954", 0x9d, 0x1}, {&(0x7f00000007c0)="133eca527c82dbb55dc154c8b95a7f7110b006c04a84cd937664f7484660da", 0x1f, 0x2515273b}], 0x144800, &(0x7f00000008c0)={[{}, {'}}@+'}, {}, {'.%&'}, {']'}, {}, {'^:#)'}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@obj_user}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xb6'}}, {@hash}, {@uid_lt={'uid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, '\']'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000980)={{r0}, 0x0, 0x1e, @unused=[0x3, 0x6, 0xf5b4, 0x80], @devid=r3}) r4 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000100)=0x1) r7 = fork() perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7, 0x2, 0x0, 0xa3, 0x0, 0x800, 0x80326, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x4, @perf_config_ext={0x7, 0x5}, 0x12300, 0x3, 0xfffff400, 0x0, 0x1c77, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x401}, r7, 0x6, r0, 0x9) [ 2191.727017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2191.739989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2191.740767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2191.751132] loop0: detected capacity change from 0 to 135266304 [ 2191.755582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2191.762381] option changes via remount are deprecated (pid=25951 comm=syz-executor.1) [ 2191.764042] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 2191.783733] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00.ofile0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000093ba8fd960591f1e8e1a8d1b83758db8469474b6fa6878f2b0decd5ee6efce19af9ddb9e1fd7e59064423415b32953334f5059ae601f9f7391e28101adba4c72256b7e050000000000000074718b36a2db775e05e4de2916ffa13a3f15f030db9e875a0028d823837a5245954f409c6cfe4a9740ea0ad0a100cec584c1ddbd8f90507de7", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000000180)=""/189, 0xbd}, {&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f00000003c0)=""/116, 0x74}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/49, 0x31}, {&(0x7f0000000580)=""/222, 0xde}, {&(0x7f0000000680)=""/75, 0x4b}], 0xa) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000840), 0x101000, 0x0) perf_event_open(&(0x7f00000007c0)={0x4, 0x80, 0x0, 0x60, 0x0, 0x3f, 0x0, 0x8000, 0x10000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71203894, 0x4, @perf_bp={&(0x7f0000000500), 0xc}, 0x1280, 0x7fffffff, 0x7f, 0x5, 0x81, 0x9, 0xffff, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x7, r3, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2191.812652] loop1: detected capacity change from 0 to 8388096 [ 2191.817133] tmpfs: Unknown parameter 'smackfstransmute' [ 2191.832667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.834232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.835889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2191.851072] option changes via remount are deprecated (pid=25951 comm=syz-executor.1) [ 2191.852844] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 2191.865831] loop1: detected capacity change from 0 to 8388096 12:13:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2191.872570] tmpfs: Unknown parameter 'smackfstransmute' [ 2191.982038] loop0: detected capacity change from 0 to 135266304 [ 2202.904696] Bluetooth: hci1: command 0x0406 tx timeout 12:13:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, 0x0, 0x3, 0x0, &(0x7f0000000280), 0x0, 0x0) 12:13:54 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000100)=0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="ecffffff0100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) bind$unix(r1, &(0x7f00000001c0), 0x6e) 12:13:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:13:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:13:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, r2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000225bd7000ffdbdf25080000000c00028005000d00010001000800b200070000000800050004000000080006000d000000080005000200001b08000600070000000800040000100000"], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:13:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(r0, &(0x7f0000000240)='./file0\x00', 0x20200, 0x108) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x400, 0x0, 0x5, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) futimesat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r8 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r8, &(0x7f0000000180)='./file0\x00', 0xc1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0xf67e}}, './file0\x00'}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000140)) [ 2208.999987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001000000000000000000045c2e84b63cf937ed5e556778097644c3fba8c56f47899744725bd609cd0151121ca3dc95e9ec9e013e5ea6742667ff100000000000000080292419c8366769766118b6a4fa5bf9dd11d8c191fb7a33cf1dc3e1e8ebc49564f21461706eb57ff1956b6058957b69b60d4b2fdd24d2c03fb9bb547384434c00ea401", @ANYRES32, @ANYBLOB="05000000000000002e2f66696c653000"]) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/11, @ANYRES32=r4, @ANYBLOB="e9000000000000002e2f66696c653000"]) r5 = epoll_create(0x2) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0xc1) fcntl$setstatus(r1, 0x4, 0x40000) [ 2209.035950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.040108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.047129] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.058962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.083711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.085309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.087983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2209.096620] loop0: detected capacity change from 0 to 135266304 12:13:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002400210c0000000000000000000000000400000008000000", @ANYRES32, @ANYBLOB="0c00f1ff00000000000000d8"], 0x2c}}, 0x0) [ 2209.136780] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 2209.148665] audit: type=1400 audit(1744719234.492:23): avc: denied { relabelto } for pid=25994 comm="syz-executor.6" name="NETLINK" dev="sockfs" ino=55632 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:syslogd_var_lib_t:s0 tclass=netlink_route_socket permissive=1 12:13:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2209.262382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:13:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) clock_gettime(0x0, &(0x7f0000000040)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r6}}, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2fe46939870a24e7e27bf8653000"]) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r9, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:13:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfdef) r4 = syz_io_uring_complete(r2) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x4010, r1, 0x10000000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4ac680, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x400, 0x96, 0xc}, 0x18) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r3, &(0x7f0000000100)}, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x3}}]}]}, 0x38}}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0x1f}]}, 0xc, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2209.363642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:54 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:13:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2209.458737] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:13:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2209.543495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.545075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.546817] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2209.558428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2209.567306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 12:13:54 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f00000001c0)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x5e, 0x1) 12:13:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290300000000000000ff0f00"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = gettid() timer_create(0x5, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r8}, &(0x7f0000000040)) r9 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x440, 0x126, 0x2}, 0x18) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x0, 0x1, 0x1, 0x0, 0x3f, 0x200, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x4, @perf_config_ext={0x1, 0x6}, 0x10020, 0x7, 0x200, 0x9, 0x5, 0x7, 0x1, 0x0, 0x0, 0x0, 0x40}, r8, 0xd, r9, 0x3) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2209.714700] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2209.732591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.762700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2209.809084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2209.810791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2209.812698] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:13:55 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2209.939560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.962601] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2210.043143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2210.044960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2210.053629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2210.070131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2211.774156] hpet: Lost 3 RTC interrupts [ 2214.936359] Bluetooth: hci4: command 0x0409 tx timeout [ 2216.984385] Bluetooth: hci4: command 0x041b tx timeout [ 2219.032282] Bluetooth: hci4: command 0x040f tx timeout [ 2220.269823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2220.271885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2220.279492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2220.344640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2220.346410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2220.349421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2220.533996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2220.547953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2221.207405] Bluetooth: hci4: command 0x0419 tx timeout 12:14:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfdef) r4 = syz_io_uring_complete(r2) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x4010, r1, 0x10000000) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x4ac680, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10, r6, 0x8000000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x400, 0x96, 0xc}, 0x18) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r3, &(0x7f0000000100)}, 0x80000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x3}}]}]}, 0x38}}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x0, 0x1f}]}, 0xc, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:14:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:14:23 executing program 5: ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0xfffffffc, 0x40, 0x7fff, 0x5, 0x19, "bd827bd213e9e08a980ae60129defa68f3ef8b"}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x105000, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000180)) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4010, r5, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000016c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x9007, @fd_index=0x3, 0x8, 0x0, 0x0, 0x9, 0x1, {0x2, r7}}, 0x10000) preadv2(r5, &(0x7f0000001600)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/85, 0x55}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/177, 0xb1}, {&(0x7f0000001340)=""/247, 0xf7}, {&(0x7f0000001440)=""/171, 0xab}, {&(0x7f0000001500)=""/204, 0xcc}, {&(0x7f0000000200)=""/58, 0x3a}], 0x9, 0x7, 0xa504, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:14:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeeed8fbdb11f3925, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x21, 0x1, 0x4000004, 0x0, 0x7, 0x0, 0x10000100, 0x0, 0x9}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:23 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000009298e867d87e0ec60000"]) r2 = socket$unix(0x1, 0x5, 0x0) fstat(r0, &(0x7f00000001c0)) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) kcmp(0x0, r3, 0x0, r1, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:14:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2238.178439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2238.206970] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2238.208919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.235549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.246642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.261241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.262847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.265254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:14:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x73d}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x6, 0x6}}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x0, 0x8, 0x28, 0x3f, 0x0, 0x0, 0x2001, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffb}, 0x10d60, 0xfffffffffffffff7, 0x2, 0x7, 0x100000000, 0x2, 0x8000, 0x0, 0x92e, 0x0, 0x7a8}, 0xffffffffffffffff, 0x3, r2, 0x1) 12:14:23 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="01000001e3ffffff17000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000001c0)=0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2238.332034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:14:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x354c1e68}], 0x483, &(0x7f00000002c0)={[{@norecovery}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1ccd, 0x6, &(0x7f0000001440)=[{&(0x7f0000000140)="2029115c0de9bfa1af205dc4c06581913b7ed12f1f05d74ae0646fc5c18af4", 0x1f, 0x3ff}, {&(0x7f0000000180)="c859974ccc566ce480aec971db769bd096eae53c51f416c43ac0db79a2a146b4e87a369c04e81367cd7e85e540f079bdb7caa14271a51878b1c79f220916dec400b1177231d7679b9d87225bcc4b3a7bfc259082524d128c6fb7947de979857c30b6a73829ff422c7dd4c8854cd493f50c30576c50c9767650f149b3f7f9dd5d73e241060fbdc1d9be55f85114615087bf7cc75c1ea5ef63fd6721f7e02f31b4db50f58a9fb7c17dc91e609c2179e207", 0xb0, 0x3f}, {&(0x7f0000000240)="c103cfdea01c1a459d0d48ced6909c6b23bb59404848db985aa87d26210b669d5d35b4f0080f6e68a425c62cc1666901ed6c169b0491446b5639f1f44aa1da8740b233b6aa1ae4a8aeb36e1f73ff3d464ede8d5f1c1a24b3374a2e630254e5fbff2c228f8a3e277f6d748691e33c", 0x6e, 0x3ff}, {&(0x7f0000000300)="e4550769806c2a4a5773750931b10d0f50a50c114ff6057c04b6812e25330c58e5d2ae6b50dcb53be628615cbb217ee0d16c472a4e5f8f66861685991a44f6fe9797f97500a8c8685e8732ca0c8642c43e91a2abe338d2987f03c702986eaf53cb15c79627799408efebca1b6ebee65e03ace423fa4aaf85b71e35a37289d62ee297f9d65e758b156b8152d103926d95374c8708", 0x94, 0x8}, {&(0x7f00000003c0)="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", 0x1000, 0x2}, {&(0x7f00000013c0)="01d461cfc3b0e7d192efed9ba9e49db50b858e9b27af9bc3050aea4e8ecf5fb58b2afbb23efd3fa733ab1aa093c87f720c8deb9b8e3a88eb0c64292f25961cc25ca6", 0x42, 0x8}], 0x1020000, &(0x7f0000001500)={[{@utf8}, {@fat=@nfs}], [{@euid_lt={'euid<', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'norecovery'}}, {@context={'context', 0x3d, 'root'}}, {@subj_role}, {@euid_eq}]}) chdir(&(0x7f0000001580)='./file0\x00') 12:14:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) r2 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x107001, 0x131) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r3) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x20, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c460405c440ff0f00000000000002000300090000008a0100000000000040000000000000007700000000000000050000000300380002005303fa08010007000070aa000000f3ffffffffffffff070000000000000020000000000000000100000000000000ee889c56000000000000000000000000b48174d0de33976578d17d06e7334a744c3c0dba74301dc513784d92736bc8050268a52b97c6927e15731bd6dd163809d0ff5ba2cae43cf55de4a146eacd0040936dfe6337a876360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/1462], 0x5b6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = inotify_init1(0x80000) fallocate(r5, 0x4b, 0x16a, 0x7) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4200, 0x0) 12:14:23 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4ac}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2238.533024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:14:23 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000000001800831b9940773803a1b400000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x3, 0xd2, 0x0, 0x1, 0x5}, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000240)=""/3, 0x3}], 0x3, 0x400, 0x5, 0x1) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2238.571895] loop1: detected capacity change from 0 to 135266304 [ 2238.646680] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2238.648968] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2238.651128] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2238.658840] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2238.700777] EXT4-fs error (device loop1): __ext4_get_inode_loc:4405: comm syz-executor.1: Invalid inode table block 0 in block_group 0 12:14:24 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2238.722388] EXT4-fs (loop1): get root inode failed [ 2238.723574] EXT4-fs (loop1): mount failed 12:14:24 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000467236dbd19b2bd183f819d0bcb388d7dca26db663b34a30f9b5d1819e84aed2f9dc67630b", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, r2, 0x100) fstat(r0, &(0x7f0000008b80)) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) r4 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000000040)) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r5, r6, 0x100) getgid() connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2238.753597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2238.755201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2238.756961] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:14:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2238.813169] loop1: detected capacity change from 0 to 135266304 [ 2238.893177] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2238.895850] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2238.898288] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2238.962891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2238.965938] EXT4-fs: failed to create workqueue [ 2238.967469] EXT4-fs (loop1): mount failed [ 2239.060890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2239.095754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:14:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:14:41 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:41 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:14:41 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r5, r6, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r3, r6}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x3d}, 0x0) syz_io_uring_setup(0xdbb, &(0x7f00000000c0)={0x0, 0x25de, 0x4, 0x3, 0x1a4, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r9 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x10010, r1, 0x8000000) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r13}}, 0x1) syz_io_uring_submit(r4, r7, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r8, &(0x7f00000001c0)={0x80000, 0x14, 0x4}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r13}}, 0xd8) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:14:41 executing program 5: r0 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000001540)={0x0, 0x4, 0x10000, 0x40, r0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r4, 0x0, r3) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/94, 0x5e}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001380)=""/231, 0xe7}, {&(0x7f0000001480)=""/64, 0x40}], 0x7, 0x3, 0xffff8000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:41 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={0x80}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = io_uring_setup(0x3972, &(0x7f0000000a40)={0x0, 0x5912, 0x8, 0x0, 0x24}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00), 0x1312) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x6c, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x4080) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x1014, 0x0, 0x400, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x404801) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x401) io_uring_setup(0x4a83, &(0x7f00000003c0)={0x0, 0x50c9, 0x4d9555701df31838, 0x2, 0x203, 0x0, r1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000080)=0x800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/77, 0x4d, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001d00210c00000000000000000400020014001180809801a7b0c7dba09475f251c743092f2000008008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x48}}, 0x0) 12:14:41 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="81134ac46c653000cad478d433b0938ac93294cea44cfebed073d5102a9754267437769d68b405f0da4834f8fee16ff18944473e8684d50f5bb0c7c4200008bd128b4c217c72471c5fa1e3e3f38d4c03d65d3526fcce5f875b948b5260f4a9444816aed168a4e78a224497626ada00cc96cc6a13a2ae4f9d0a33fb31c8359999212e98"]) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000012fbf9b2db47a9e5d476f8b3177f1572acf1dbc9c940adaf66726047f35d48dd43af690ed2b6b1f4888a6052da15ae7f0c7f5f5e095ffea4cedb90979118829b470050c75e878686b4a6b47f61660f3f91a909eff54b45fed762093c44c76eadc4ba7856135cdaf9862c4e67cede4f911204a889b43fbac183a5b9425e049c8bdbcaf170f70a1539d5c8e6fc6ef19215472a3f86382326097c21e9a702691eba5", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) r4 = dup3(r1, r1, 0x80000) ioctl$FICLONE(r3, 0x40049409, r4) r5 = perf_event_open$cgroup(&(0x7f0000000280)={0x2, 0x80, 0x80, 0x3f, 0x2, 0x87, 0x0, 0x3, 0x40, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x1}, 0x3800, 0x800, 0x10001, 0x7, 0x10001, 0x8, 0x200, 0x0, 0x6a8, 0x0, 0x8}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x21, 0x8, 0x53}, r2, 0x9, r5, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2256.446879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2256.453786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2256.497749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2256.508905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2256.534812] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2256.562914] debugfs: Directory '€˜§°ÇÛ ”uòQÇC !' with parent 'ieee80211' already present! 12:14:41 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000900000018000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r1, &(0x7f0000000140)=""/199, 0xc7, 0x140, &(0x7f0000000240)=@in6={0xa, 0x4e22, 0xfff, @rand_addr=' \x01\x00', 0x1ce1}, 0x80) 12:14:41 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000000002e2f46696c65300055518b69e2398eed977228985f07b28ea0f38e49e4be086b00143f8444f6bdc6a9faa554823c411a63e6dca3163d48aaeef094e2e4bbfb253af36bcbcbe8ea7e"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)="989b41ca227b3609954edf", 0xb}, {&(0x7f0000000300)="21012f1b6970cc0d8bc02b2777183f6acd2d9b9429df2a7546c9c226023be5879a618a9f6f3ad756d90bddccb2e43347604dd4fbe8711b0384f8faa86000f0a146f88d3bea137168b6529fba7812c7455bd526a48c36e73a34bf0abe61a286e1ea009e0a752d57290f06adbc05c66af912e6979dbb570daa84e4ad4820520f4468d8014f8bc9ebc9b290ce6e28d0e717e6fcdc0a4c0dd5bb", 0x98}, {&(0x7f00000003c0)="6e915549bd706248a30f39c3dc8e1e8fc86278b001ef72877ccb6f", 0x1b}, {&(0x7f0000000400)="78d9f22327730d7bead4a8bfb56efab70f6350bcc505d882c94871be353f9bd3ca6fa9850661d0021f01904b5cc38faed035d9ca615e3ce37fb100d45126a4f3d6e6dafbcfb73f23edc2c5b509d2bc84910ba2dd864c08d81e642b581ae1797891d0842e6a59c11c42879b7099c4517560eb61efa5d6b3ed849b45c6c1727dfc0eaf1f4e559a0e629703e19cc8bf6500bd01ea978897ac93393b5eaebf4591358beb59e92581247f035b94269ac0", 0xae}], 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0xc1) dup3(r0, r1, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018004000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c651500a1e77d7607055c1b7490ebb7d8f44d01f7ae1552d56859b15dd9c750479e9d2c4a9c1551275e5684ccc3b9168fe6f4fc79d046c2b41bb5d63dfc5b22e06d9bd4f1ab5bc0830e067db867921b58240a8f7c76b62349c3340c34994789eac5239e0eba893f6c33003dd993aa05e5a37373410a56e2bb69f169af0d23bb84b48d692fd73b7001f1c804aec58e402d219e8582132fe1a346b519"]) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x800000000000, 0x1f, 0x0, 0x4000004, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r3, &(0x7f0000000180)='./file0\x00', 0xc1) fallocate(r3, 0x2f, 0x0, 0x7fffffff) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2256.786701] loop6: detected capacity change from 0 to 135266304 [ 2256.801963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.803556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.823516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2256.950148] loop0: detected capacity change from 0 to 135266304 [ 2256.993943] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value 12:14:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000004c0)=0x209c, 0x4) sendto(r3, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:14:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000600010000000d000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:58 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) statx(0xffffffffffffffff, &(0x7f0000000100)='./file2\x00', 0x6000, 0x80, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, r5, 0x100) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000008fe01ff19444cca40427f6bf54f769d32fd4c17e290fe0757b29dcc7628de2dcae74627c6c46aa425a0eebc7e116e195864f7b953b15a9a2f4271ff9ca2e4e2f2f2e400dab3764330a4a1cea2caf173d11be0cbb430959bf5f993225e4569b975ab3200e5033eedfa34809e6982bc8a81a3fc0488bdc02a2edf11302dbb6e08b4de0df24d8124f4be39995c9497741d15f03a1b71", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB='./file0\x00']) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:14:58 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000500)='{\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) openat(r1, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000300)="cd47967d00193e6e0d670400000000000000a02eab62c925172d010800008f6f7c71c6a5ffcf912874fa81c1f675", 0x2e}], 0x1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) sendmmsg$inet6(r5, &(0x7f0000000180), 0x0, 0x40000) unshare(0x48020200) 12:14:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:14:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:14:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:14:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="08000000000000002e2f66696c613000a2c33f3ceafb54521b3acf72cdc32b69e328edb04d0c7da61f00ddd780dcefccc6ccc87a8bb933647f8c5e971257a7500df1203d58690a3fcf79a04b7a0d076afcfc8827bc03de8013a0f9709120e555c35ffb605e8d87070000002e7d5398a1fce3277f24ffff0000c126511ca950be4ba3d33beeb8207a9ad3e2f133bd212d5d4e8f7a45fb8a95ab38fdcb7c9c98e4193fc5b81fd7ef3fde7e315e0a2427bec9b9ada858263886a1cafe0ac7e399de1adbe582776af545e5b324bafd431208162767139c2f3be86eb0af6bf7615fe602d3859912ecfb5d33a1b0005c"]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) fcntl$setsig(r0, 0xa, 0x40) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2273.005630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.015541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.042973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.052847] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2273.071998] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.104875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:14:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000001c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2273.136849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.138534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.142745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:14:58 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) read(r0, &(0x7f0000000080)=""/217, 0xd9) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800005, 0x1010, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x150, 0x0, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_MARK_MASK={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) fcntl$dupfd(r4, 0x0, r3) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000180)) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:14:58 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpeername(r0, &(0x7f00000002c0)=@isdn, &(0x7f0000000340)=0x80) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) write$binfmt_elf64(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x0, 0x3, 0x7, 0x16, 0x2, 0x3, 0x0, 0x14e, 0x40, 0x108, 0x9, 0x3, 0x38, 0x2, 0x8000, 0x43, 0x1}, [{0x4, 0xfffffff7, 0x6, 0x4, 0x768e, 0x8000, 0xc89d, 0x3ff}, {0x7, 0x200, 0x3f, 0xe89, 0x687, 0x101, 0x1, 0x8}], "e2", ['\x00', '\x00']}, 0x2b1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2800084, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}, {@access_user}, {@access_any}, {@access_uid={'access', 0x3d, r3}}, {@cache_none}, {@uname={'uname', 0x3d, '\x93[[&@'}}, {@cachetag={'cachetag', 0x3d, 'security.selinux\x00'}}], [{@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0xdc4b806b0b8443e, 0x31, 0x33, 0x35, 0x64, 0x62, 0x32], 0x2d, [0x31, 0x39, 0x30, 0x38], 0x2d, [0x61, 0x37, 0x62, 0x37], 0x2d, [0x65, 0x31, 0x37, 0x37], 0x2d, [0x36, 0x0, 0x63, 0x61, 0x36, 0x54, 0x38, 0x31]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}}) 12:14:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:14:58 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2273.508119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=26679 comm=syz-executor.0 [ 2273.533562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.574374] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2273.582258] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2273.590687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=26691 comm=syz-executor.0 12:14:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = fcntl$dupfd(r0, 0x0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001440)={'bridge_slave_0\x00'}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x4080, 0x0) preadv2(r2, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/249, 0xf9}, {&(0x7f0000001180)=""/235, 0xeb}, {&(0x7f0000001280)=""/249, 0xf9}, {&(0x7f0000001380)=""/60, 0x3c}], 0x5, 0x4e, 0xcad, 0x2) openat(r1, &(0x7f0000001480)='./file0\x00', 0x50180, 0x30) ioctl$FIONREAD(r1, 0x4b4d, &(0x7f0000000000)) 12:14:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2273.642724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2273.644346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2273.649526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2273.663856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:14:59 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x100000000}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000001c0)={0x1ff, {{0xa, 0x4e22, 0x8, @mcast2, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x9, @private2, 0x8}}, {{0xa, 0x4e20, 0x3, @mcast1, 0x4}}, {{0xa, 0x4e21, 0x100, @local, 0x5}}]}, 0x210) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x501000, 0x50) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000001000)={0xd9, 0xfbe, 0x5, 0xffffffff, 0x7, [{0x6, 0x42, 0xfffffffffffffffb, '\x00', 0xd8e}, {0xffffffff, 0x4, 0x400, '\x00', 0x1f08}, {0x7e, 0x7, 0x7f, '\x00', 0x200}, {0x7ff0000, 0x400, 0x6, '\x00', 0x2d00}, {0xd0cf, 0x1, 0x9, '\x00', 0x800}, {0x0, 0xff, 0x9, '\x00', 0x8}, {0x9, 0x401, 0x800, '\x00', 0x2004}]}) unshare(0x48020200) 12:14:59 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:14:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6bc5, &(0x7f0000000080)={0x0, 0xa601, 0x1, 0x1, 0x2d5, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) r5 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, r4, &(0x7f0000000280), &(0x7f0000000180)='./file0/file0\x00', 0x500, 0x800, 0x0, {0x0, r9}}, 0xfffffffa) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2273.801609] audit: type=1326 audit(1744719299.146:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.807112] audit: type=1326 audit(1744719299.146:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.843092] audit: type=1326 audit(1744719299.151:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f81a34f9c27 code=0x7ffc0000 [ 2273.850149] audit: type=1326 audit(1744719299.162:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 12:14:59 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="312961daca2d2408f5cc3cbc543a5c8a02aa11f04c78d524da0f91d0c44818bec38f84fc4a9d08f16c0851637e8681ecbf9e422b802d43a4811efa3c6c91b4c7279214b537b05ad42d49e3e6273d1f10b24f08df443071683fb74edd5bc1f2e61eadef1d08b22d48f735f6de5f483935e7"]) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2273.872856] audit: type=1326 audit(1744719299.162:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.878759] audit: type=1326 audit(1744719299.166:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.884407] audit: type=1326 audit(1744719299.167:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.888149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.889841] audit: type=1326 audit(1744719299.167:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.896514] audit: type=1326 audit(1744719299.167:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 12:14:59 executing program 1: mlockall(0x2) mlockall(0x0) mlockall(0x5) mlockall(0x1) mlockall(0x3) mlockall(0x4) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x2000) mlockall(0x8) shmctl$SHM_LOCK(0x0, 0xb) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x1000) mlockall(0x2) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) [ 2273.901680] audit: type=1326 audit(1744719299.169:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=26697 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2273.968916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2273.972698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:14:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000340)='./file0\x00', 0x7, 0x3, &(0x7f0000000600)=[{&(0x7f0000000380)="4a15c213b3b733801b36de4ed359ee621a62fa68dc5a93f475ea0af9f241cfba31620d291448a999b0560bb1972e92f89099c44ee72318de8c13b4e09ede375dd085f0e75dc4bbfa59268939c1864a65d0df9f461bda9690c502ae00cb3ae7854dd0ca953bd8c9d965268a", 0x6b, 0x6}, {&(0x7f0000000400)="f12972b4b21825ab762634d2f2578008cbc7ff1077d329b45befe25176", 0x1d, 0x9}, {&(0x7f0000000440)="68f5c0632b79e9ef2a35c677e46cc4a46cd5cc1d1ac1c255a51e313c318c1153a30f38963824cd36280bf8fd492620950a0e982950f4da4e8dc20153e6336274db6c818d0b53e7f717537932951d304082d86596f5e397e36fef82a1926270f116edd9a044f1300811e93b817901", 0x6e, 0x9}], 0x10840a5, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRESDEC=0xee00, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16]) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000002) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000007c0)) write(0xffffffffffffffff, &(0x7f0000000240)="01", 0x1) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x20200, 0x86) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3, 0x0, 0x800000, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xb) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = eventfd(0x3) mq_open(&(0x7f0000000540)='\xec!)\x00\xb3\xbd\xfd\xa0\xc2\x8b&\xa7!\xeb\xad\xbb\xb0\xe6\xe3\a:\x99\r\x8a\xc7\x1c\xfc\xfbHe\v\xee\x86\x04\x1dPs\x9ay\x9eq\x85\xc5\x98\xbf\x92\xc1tdId\x968\xdb\xca>\x00\xe1\x91\xfc\x17\x92\xe3\xb5\xf8\xe0\xfa\xa2\xa3=\x01C\xe0\xb5\xfc?q\xbf\xb8\xc11x\t\xe4\x81\xe3V\xb3\x06I\xebw\xa1\xc7\xfezrY\x7f@\x11\x067', 0x40, 0x38, &(0x7f0000000240)={0x5, 0x2, 0x7ff, 0xffffffffffffffff}) r4 = dup2(r3, r2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000280)) linkat(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[]) [ 2274.023930] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2274.191524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.193224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.194968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:15:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x1b, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x2052, 0xc21, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 12:15:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:15:15 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\r\x00\x00\x00\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) connect$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$sock_proto_private(r5, 0x89e0, &(0x7f0000000400)="f5df446ecffc3186198b53c309c5a1154f4a40d6527eeafb843502eac658da94020691a39da5db2d555a862bca0fbb8bbc73e8f6868e97153bb2bb875b228d49e7343bf1f25c34d4272750419af809814bd8eb94284567dcfcf3f34d3723b7f76ec2284b14b1b965050a2b84156613e41162927977b2a62fc53d5101db79fe1124a58b4cf7a0bf47798d7cc4731f3039c3bedb80d8c65325de457f3c580a033eecc27277eff87e42") fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:15:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r2, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x6, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x1ff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:15:15 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) io_uring_enter(r0, 0x6ad2, 0x9e34, 0x3, &(0x7f0000000280)={[0xf6]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2001, 0x111) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000001c0)) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:15:15 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r6, r0) 12:15:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:15:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f00000008c0)=0x0) io_getevents(r0, 0x4, 0x5, &(0x7f0000000440)=[{}, {}, {}, {}, {}], &(0x7f0000000380)={0x0, 0x989680}) [ 2290.467900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2290.483535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2290.508565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8274 sclass=netlink_route_socket pid=26744 comm=syz-executor.1 [ 2290.548043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2290.571152] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2290.598629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:15:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000003f741946036f090000009332", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="70c6000000000000a9eddf4b7111570970a2dcafeb1fef54107a3774910f5971a5d4604602ffdb5778a41432abbd1655977e8022180a6ce5b6b096e7a51713200bfe45c0bcc50247fdae909bbc487c54112174e485ade9d39cbab202991dd9e9b5452335049f31fe00dcc0e84e6c7bc8877a39e86693fbf9d612efadbfb0f4466123e5e1cdcbeaac90d9b6091f38a3856723e13cbe62519280f46441c5cf5d6c251ae67c12cdb2d12fe4b9de2b0f365478"]) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) splice(r1, &(0x7f00000001c0)=0x8, r2, &(0x7f0000000200)=0x7, 0x80000001, 0xb) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2290.617024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8274 sclass=netlink_route_socket pid=26756 comm=syz-executor.1 [ 2290.651016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2290.653281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2290.655529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:15:15 executing program 5: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80800) write$binfmt_script(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1079) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x20010, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) write$P9_RREADLINK(r5, &(0x7f0000000240)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00') fgetxattr(r1, &(0x7f0000000140)=@random={'system.', '^\\(\\\x00'}, &(0x7f0000000180)=""/176, 0xb0) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 12:15:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') pread64(r0, &(0x7f0000000240)=""/83, 0x53, 0x200000048) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r0, 0x8000000) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x301, 0x0, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f0000000140)=0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec025f2400113680b0eb4d4627baf31afc6413da00240bc010c515c477650eaf930f", 0x4e}], 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x12f7, &(0x7f0000000300)={0x0, 0x5936, 0x4, 0x2, 0xca, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000380), &(0x7f0000000480)) 12:15:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x800, 0x70bd2d, 0x20, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd0}}, 0x4084) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) dup2(r3, r1) 12:15:16 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0xa2, 0x4, 0x5, "c5bedea897330a4a97c146d171470453", "df0b6173a07eb2f913d8af415eb0a45ef152eae6fa639beaf750b948722b0b31d22615d41b0be0897c20aec4a618cae53622659f399662cac1aa8444749b87aa206f53eaf770e1db03510785e1593e8f04cb597f00541f60d56c85519ac6318e2923c304719e7885287e0fd307115879fd306bf487729ff2008cd5508b941e31ffe4db1424a997d9b66a6ded16"}, 0xa2, 0x2) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:15:16 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r6, r0) 12:15:16 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2290.857921] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 2290.857921] program syz-executor.1 not setting count and/or reply_len properly [ 2290.935319] sg_write: data in/out 33555249/30 bytes for SCSI command 0xfd-- guessing data in; [ 2290.935319] program syz-executor.1 not setting count and/or reply_len properly 12:15:16 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x60000003}) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20000001}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xfd, 0x8, 0xec, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x60000000, 0x0, @perf_config_ext={0x6, 0x3}, 0x8004, 0x80, 0x10000, 0x4, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) dup2(r3, r1) [ 2290.965888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2291.016476] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2291.027558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:15:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) ioctl$CDROMGETSPINDOWN(r3, 0x531d, &(0x7f0000000080)) [ 2291.068935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2291.070587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2291.072481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:15:16 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r1 = socket$unix(0x1, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000001940)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)=""/29, 0x1d}], 0x1, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/10, 0xa}], 0x1, &(0x7f0000001000)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001180)=""/236, 0xec}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/57, 0x39}, {&(0x7f0000001300)=""/176, 0xb0}, {&(0x7f00000013c0)=""/189, 0xbd}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x8, &(0x7f0000001500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/177, 0xb1}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000001900)=[{&(0x7f00000017c0)=""/253, 0xfd}, {&(0x7f00000018c0)}], 0x2}}], 0x5, 0x0, &(0x7f0000001ac0)={r2, r3+10000000}) fcntl$setown(r1, 0x8, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2291.108284] kauditd_printk_skb: 15 callbacks suppressed [ 2291.108303] audit: type=1400 audit(1744719316.452:49): avc: denied { block_suspend } for pid=26785 comm="syz-executor.5" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 12:15:16 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x208398249bea4a44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xa28c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8001}, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x800, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) mount$9p_xen(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=xen,access=', @ANYBLOB=',loose,obj_type=system.p', @ANYRESDEC=0xee00, @ANYBLOB=',subv_lser=,,\x00']) inotify_add_watch(r3, 0x0, 0x2000003) lsetxattr$trusted_overlay_redirect(&(0x7f0000000540)='./file1\x00', &(0x7f0000000580), &(0x7f00000005c0)='./file1\x00', 0x8, 0x2) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB='$}', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fddc13df3a2d491d1959acca5ad771f779c3102b9e127e21e8e000bae41d9d0ac353a279a93a8993f9be9bf2bf4102dc9550f9da56922eaea9f05cc1d2b5ad1e5f91ed8c92130df26d25", @ANYBLOB="833c678370f3c0192ac188feb41b83ac313c590a167c26366de7f6e94cb8219a7507ba522321e981b5233ef8032e49e3be17be074a55cfd8e89533042142096aa61f2bc5a8f908ac9cc3843f027c01f2334ad2e79d3f2c82c80a5bc908d669104ff40372b598db400aae9e28aad05434b34918ae7976083b1db3b6a5ed213190bdad88f424f57630900046a0c23f37a33f7399fc671d5de6029a42bdef9e111621241fda4ceb28f36de06b384da28824010b5e607a5add8d5b484985"], 0x54, 0x3) syz_io_uring_setup(0x2201, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) sendfile(r1, r2, 0x0, 0x100000001) 12:15:16 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e0266697091f18b"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) fsetxattr$security_selinux(r0, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:xserver_misc_device_t:s0\x00', 0x2b, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) fcntl$getownex(r4, 0x10, &(0x7f0000000100)) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2291.306754] audit: type=1400 audit(1744719316.650:50): avc: denied { relabelto } for pid=26792 comm="syz-executor.4" name="UNIX" dev="sockfs" ino=57142 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:xserver_misc_device_t:s0 tclass=unix_stream_socket permissive=1 [ 2291.328730] 9pnet: Could not find request transport: xen [ 2291.553664] 9pnet: Could not find request transport: xen 12:15:31 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00/file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f000000cb40)=[{{&(0x7f0000001440)=@x25, 0x80, &(0x7f0000001780)=[{&(0x7f00000014c0)=""/222, 0xde}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001640)=""/128, 0x80}, {&(0x7f00000016c0)=""/106, 0x6a}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000001740)=""/50, 0x32}], 0x7}, 0x1}, {{&(0x7f0000001800)=@isdn, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/129, 0x81}, {&(0x7f0000001940)=""/96, 0x60}], 0x2, &(0x7f0000001a00)=""/90, 0x5a}, 0x400}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000001a80)=""/212, 0xd4}, {&(0x7f0000001b80)=""/211, 0xd3}, {&(0x7f0000001c80)=""/231, 0xe7}, {&(0x7f0000004e00)=""/52, 0x34}, {&(0x7f0000004e40)=""/249, 0xf9}], 0x5, &(0x7f0000004fc0)=""/4096, 0x1000}, 0xf5e}, {{&(0x7f0000005fc0)=@ethernet, 0x80, &(0x7f00000084c0)=[{&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/248, 0xf8}, {&(0x7f0000007140)=""/97, 0x61}, {&(0x7f00000071c0)=""/59, 0x3b}, {&(0x7f0000007200)=""/176, 0xb0}, {&(0x7f00000072c0)=""/6, 0x6}, {&(0x7f0000007300)=""/187, 0xbb}, {&(0x7f00000073c0)=""/4096, 0x1000}, {&(0x7f00000083c0)=""/69, 0x45}, {&(0x7f0000008440)=""/100, 0x64}], 0xa, &(0x7f0000008580)=""/167, 0xa7}, 0x8}, {{&(0x7f0000008640)=@xdp, 0x80, &(0x7f0000008b00)=[{&(0x7f00000086c0)=""/182, 0xb6}, {&(0x7f0000008780)=""/26, 0x1a}, {&(0x7f00000087c0)=""/24, 0x18}, {&(0x7f0000008800)=""/243, 0xf3}, {&(0x7f0000008900)=""/190, 0xbe}, {&(0x7f00000089c0)=""/196, 0xc4}, {&(0x7f0000008ac0)=""/51, 0x33}], 0x7, &(0x7f0000008b80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000009b80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000af80)=[{&(0x7f0000009c00)=""/4096, 0x1000}, {&(0x7f000000ac00)=""/243, 0xf3}, {&(0x7f000000ad00)=""/226, 0xe2}, {&(0x7f000000ae00)=""/72, 0x48}, {&(0x7f000000ae80)=""/216, 0xd8}], 0x5}, 0xfffffffa}, {{0x0, 0x0, &(0x7f000000b0c0)=[{&(0x7f000000b000)=""/66, 0x42}, {&(0x7f000000b080)}], 0x2, &(0x7f000000b100)=""/247, 0xf7}, 0x7}, {{&(0x7f000000b200)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f000000b4c0)=[{&(0x7f000000b280)=""/14, 0xe}, {&(0x7f000000b2c0)=""/16, 0x10}, {&(0x7f000000b300)=""/40, 0x28}, {&(0x7f000000b340)=""/13, 0xd}, {&(0x7f000000b380)}, {&(0x7f000000b3c0)=""/222, 0xde}], 0x6, &(0x7f000000b540)=""/129, 0x81}}, {{&(0x7f000000b600)=@isdn, 0x80, &(0x7f000000bac0)=[{&(0x7f000000b680)=""/100, 0x64}, {&(0x7f000000b700)=""/206, 0xce}, {&(0x7f000000b800)=""/255, 0xff}, {&(0x7f000000b900)=""/222, 0xde}, {&(0x7f000000ba00)=""/142, 0x8e}], 0x5, &(0x7f000000bb40)=""/4096, 0x1000}, 0x2c}], 0x9, 0x40000000, &(0x7f000000cd80)={0x77359400}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x42) 12:15:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:15:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x45f4, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000500)=0xe8) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000100)={0x8e, {{0x2, 0x4e23, @multicast1}}, 0x1, 0x3, [{{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0x4e23, @remote}}]}, 0x210) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 12:15:31 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f652ff00000adfecff0697674008c418db3271e06c6fdefd5e49d51d741bf104f5f04cb69105a5000f636d17aa76fb69aa3c285b23895a6fae70f20dfd6090000001b20af75fba7"]) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:15:31 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x60000003}) r3 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x20000001}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0xfd, 0x8, 0xec, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x60000000, 0x0, @perf_config_ext={0x6, 0x3}, 0x8004, 0x80, 0x10000, 0x4, 0x9, 0x3, 0x0, 0x0, 0x9, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x8) dup2(r3, r1) 12:15:31 executing program 0: getcwd(&(0x7f0000000280)=""/236, 0xec) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x10) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) r5 = syz_io_uring_complete(r3) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80800) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000180)={0x3, 'sit0\x00', {0x8bb}, 0x4}) timerfd_create(0x1, 0x80000) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0xc100, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) 12:15:31 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:15:31 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r3, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r6, r0) [ 2306.439121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2306.469077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2306.478657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.488158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2306.489787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2306.491822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2306.491852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2306.498243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:15:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) openat(r0, &(0x7f0000000780)='./file0\x00', 0x2c0000, 0x158) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)}, {0x0}, {0x0}], 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(0xffffffffffffffff, 0x0, 0x501200, 0x130) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4002) fallocate(0xffffffffffffffff, 0x1, 0xffffffffffffff80, 0x80000001) fallocate(r2, 0x0, 0x0, 0x8000) faccessat2(r1, &(0x7f0000000740)='./file1\x00', 0x1, 0x1000) lseek(0xffffffffffffffff, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) lseek(0xffffffffffffffff, 0x6, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x78}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x2, 0x0, 0x4, 0x1000000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x45000827) 12:15:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x98) dup3(r0, r1, 0x0) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4b, 0x57, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x8001}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:15:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}}, 0x4044804) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290300000000000000000500"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x8}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x20}, @NL80211_TXQ_ATTR_CWMAX={0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6e2dc1ae03cc3d63}, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x0, 0x1, 0x1ff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x38, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}]}, 0x38}}, 0x4000001) 12:15:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:15:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:15:48 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file\'\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_io_uring_setup(0x3d87, &(0x7f00000004c0)={0x0, 0xa95b, 0x10, 0x2, 0x3d1, 0x0, r4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000540), &(0x7f0000001200)) r5 = signalfd4(r2, &(0x7f0000001240)={[0x8000000000000000]}, 0x8, 0xc00) name_to_handle_at(r5, &(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)=@isofs={0x14, 0x1, {0xff, 0x3, 0x1, 0x5, 0x5224, 0x6}}, &(0x7f0000001300), 0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000400)={{'\x00', 0x2}, {0x2}, 0xb0, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="67448bb7c66a7ae54b21ac7035136f05e327dfd2899b32cc1a8930ef892c6307da3c0cc80b3771cbbe207267556e8745af9e08ca35e013e438e4f578edecc5125785f7d9e63f02d74e2f68f50f81968fab48abcca1a4338fefcb5aa1ad60ccd583efe252ee347d5c8d81b72207da0f5d29a89a4d9f2c89d3b0ef65a6cdbb3f30d6911a125d9b18b7012ef21b052ab7e508e7e088f4304258d729863f1d641cea0361bd95d79102107b75bab61a7491569383d48944240d18dabdb4944b29cd99d62312a56bff3613f1c7392ac857c01a739b1d42b4defacbfb5b2d1862d6ee80200c61fd593a04b1de0173bb456ecc17ebc3e5088599d53e976a7a904666ed6063d83e405e9675387352021e063eab7ba7759c2cc97bda9c80aad547899c892192b451c56243f5a209d4af3caaafdcafdea1e939d388ae2542b5b61733bb02f31c9d78f88d439b57050daa2a55c956d880e09bf53a080035ebd0259a762caa02c187a29c880c65dbd028bbb75d46ada277a6897ad8e0f08b91506c083021b6a31ad7445abf5a069c50139b02f8e4697c1d686ae167f40465ae2da4941934a143e30860556372241760925f72f325bbb08e978b8d0c2b3edc5f207083a74b0e17fd", 0x1c1, 0x0, &(0x7f0000001000)={0x2, 0x175, {0x1, 0xc, 0xbd, "c9baca804e1c67e625d89195279c4c1da40f0c6a5b99f41a7c8c2ff01ae91cdfdb41042a0483e2c8d0c0b668cf75abb5898fcc3569e123756d4eb6b19e2c04f35597647f5f02f0116a526c323a35b6b42e296ea01c13e54c3d69c064eb4b5e16296eca4a84019b29300c7c9f348dba7f9b44737499a1a3bb2164ec49144e928e78ab15a9ba5ed4ae1d4145029f340403117e000a0f5176be1d0c98625fb5ee4b5697405bade5328d2aa1592b38bbd88065011844e3c14e87de846f94b2", 0xab, "aeab04b8c177b766664123a17a3bd23e3f80468c88eebdf7c1021441502069cc53951623b416b0c44c8c8ed502f9970114e2bb340cd2c0fa3e9f70e97ac28987cb5d1742775db7a938c098f305baf06dcdac2e61983c8d4d3e7840ebef303f534d4b962b1195137efd025d1524215c42f3096281228e216ee6298e568ef9d186272b4345e7a9fb38b6f941d7fbd6ab44deb10a2cafa82d9cc6347cf7d7327148a87b685337f7dc2d58e85b"}, 0x74, "42e5175a7256872c217281bb36910ad6d9383e98810fffb8e366b98f7e076c72e3ea8c29f8f23b5c10a8bf38865c82a398146c7755149d0649bacd1e33b93861de39516ef62cdecaf73706c4427b66bc6e2d5de254143ec2f4c0702d29c8be421d606eee64621ceb7d79aa8303b91c2fbdd62a43"}, 0x1f5}) 12:15:48 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x0, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:15:48 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2323.257946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2323.258484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.267516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2323.310127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.336593] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:15:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2323.355015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:15:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc0100001a0001000000000000000000e0000002000000000000000000000000e00000020000000000000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1bc}}, 0x40850) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000480)=0xfffffffffffffe8b) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = dup3(r1, r0, 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f00000000c0)) io_setup(0x5, &(0x7f0000000700)=0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x3, r5}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000100), 0xffb, 0x401040) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) lseek(r6, 0x1, 0x4) [ 2323.405546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2323.416181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.418418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.421709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:15:48 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x221ec, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = accept$unix(r0, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) dup3(r3, r5, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:15:48 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:15:48 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x4) unshare(0x100) 12:15:48 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) openat(r0, &(0x7f0000000780)='./file0\x00', 0x2c0000, 0x158) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1831c1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)}, {0x0}, {0x0}], 0x4) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x43, 0x6a08, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(0xffffffffffffffff, 0x0, 0x501200, 0x130) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4002) fallocate(0xffffffffffffffff, 0x1, 0xffffffffffffff80, 0x80000001) fallocate(r2, 0x0, 0x0, 0x8000) faccessat2(r1, &(0x7f0000000740)='./file1\x00', 0x1, 0x1000) lseek(0xffffffffffffffff, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) lseek(0xffffffffffffffff, 0x6, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x78}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x2, 0x0, 0x4, 0x1000000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x45000827) [ 2323.688024] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26880 comm=syz-executor.1 [ 2323.715573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2323.757621] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:15:49 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2323.778110] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=26880 comm=syz-executor.1 [ 2323.853879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2323.856494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2323.862081] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2324.073687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2325.744673] hpet: Lost 3 RTC interrupts [ 2328.856341] Bluetooth: hci4: command 0x0409 tx timeout [ 2330.904273] Bluetooth: hci4: command 0x041b tx timeout [ 2332.952256] Bluetooth: hci4: command 0x040f tx timeout [ 2334.122430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.124870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.131352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2334.185317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2334.187089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2334.189634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2334.367683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2334.380714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2335.033034] Bluetooth: hci4: command 0x0419 tx timeout 12:16:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00215f00001000000000000400020006000b007d00000045b06f8127e72a865c1b0dd0d21714b84cf453c0545af9997c4f34"], 0x1c}}, 0x0) 12:16:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:16:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:16:14 executing program 5: pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000012c0)={0x20, 0x1e, 0x69844ea0a6ddcd11, 0x70bd2c, 0x0, {0xf}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x2003, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) dup3(0xffffffffffffffff, r1, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f00000001c0)="5d55a5d7251883a469d1d1c2919443dd21374ad4736816806955771044a98d1d64e2f22a08cf624ce0dff31cccc0f380b00c44fd7fcb216da59ec26dc929d7fa756722a13e9687c10ba22b6d58c94d0c1ec3b1687a313642efade4068eb99522fd785d67d5b5840f18d5ff297f47236f4be53a20ec5ebe393e2fae9ffd9c114ca90c8737d38a2a55386ed037c687b4f8d2e2c2d4602f2fed7abbc9970dc62739f7cb6adf66f7fe88333ba99be40ced9932015c4bc0f900bc19d7bebea4e63bda64745323e8113680a3975a9bb8e2ae5972a66eb6bf9973ae720c89118fb7110df2", 0xe1}, {&(0x7f00000002c0)="b769f5f8b9a19eaf04a7b7ff68dd4e4d2491b9a458867f3f47d33b9c02b39f306413fbe062d85d8f6af5d47120b46a1343f73f6d2426013b80d282a63da205122da9bd433638c847a65e024733bb92b6bd17aad389fee240631f6b303453bbd3a1d370213bafb04e2cdaf24cb3042ac9a4428ccae23beb301fdf5bf4b9e6f79976a10f4a91ca88d9c0cbc29cdd7caafe16d9a786479cf6ca3aec2c994c5f1b623de28b", 0xa3}, {&(0x7f0000000380)="88437e10cb0f37840e21ea603915d835f57b5e80ac34563c80d638488741f0abf972c900e092c5950dcc8d3f4dee2c48e16c5b4af8d3a9ca4691e16d920e51055fd2099579a6a0c80b014bd92b3a7a8ffdbe090acffb75159db7bbf17c22ad510225ded1ed3fe76d0a1c6503aa5c275ecf5312e078fc84179fb00d9988b44623a450995c9e1f6a741283a2e9515f7804ff8474d72f16dd3476", 0x99}, {&(0x7f0000000080)}, {&(0x7f0000000440)="b5e15496d452c3bbfb49e2896f2cae8c25f687c93faca0ebc53a8bc698f2ff98888a2c05f95e49508363dad028f5a1a9e34f1cad1cbb50a158db4fe227e7f59bb3fe7dc463bd7c2c04bb6b028c22799f09dbcd824de8267fd0a6b3ce792588663bb9c28a2d6ddda6915d9a2e5e5031486206526c550b41765a254cb7712245b804a24d45ab8dcbf707a4fb076e8a77eed4b1882b5f22de0a22fde382124f65c32c7160b37eba43b9e4eb33f09fa6d13dffa55c6e1ae122b22800df8c762e63a94bc7c346bd03a2de38e9fee7ebdff6dd77e90fec060ae40a524d7114648bde98d1fab45fff79aafee1625faa0d55", 0xee}], 0x5, 0x4) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x58) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="3304012000000000fe880000000000000000000000000110000000000000000000000000000000bb"], 0x28) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0xc1) fcntl$setstatus(r4, 0x4, 0x44c00) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x30040) 12:16:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:14 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:16:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(r2, 0x530d, &(0x7f0000000580)={0xff, 0x81, 0x2, 0xff, 0x46, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup3(r4, r4, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r3, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x810, r3, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x9) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:16:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$LOOP_SET_FD(r1, 0x4c00, r6) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x3d}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r3, &(0x7f0000000180)={0x40000, 0xe6, 0x8}, &(0x7f00000001c0)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r10}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r6}, 0x6) 12:16:14 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00013f", 0x48, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@private2]}], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'A3t', 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x0, 0x6000}, @void, @mpls={[{0x20, 0x0, 0x1}], @llc={@llc={0x4e, 0xe, "8d", "affebe336555da6f78a79009e44b"}}}}, 0x19) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0a8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = fork() ptrace(0x10, r0) waitid(0x2, 0x0, &(0x7f0000001c40), 0x61000008, &(0x7f0000001cc0)) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) ptrace(0xffffffffffffffff, r1) [ 2349.148431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2349.153705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.166165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.185545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.198352] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.233689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.253885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2349.278113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2349.279751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2349.281524] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:16:14 executing program 5: fallocate(0xffffffffffffffff, 0x8, 0x6d, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7f, 0x1, 0xe594, 0x6, 0x5}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r3, 0x0, r2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x10000000, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="897c6095", 0x4}], 0x1, &(0x7f0000000540)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x1, 0x0) 12:16:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="62739ec20000002e2f6669f4abb1ba"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0xff1, 0x40) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x8}, 0x0, 0x2, r2, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:16:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000800000001fcffff1100070040c4f9b11631125b49ed0d96da0000000400280004000a00040028000a000600080211000001000008006e800400010009000700c57e02a65a00000005000800020500000000370002000000"], 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048000) close_range(r0, r1, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000001b80)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000200)=0xc8, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r5, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) socket$netlink(0x10, 0x3, 0x0) 12:16:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000006, 0x8010, r1, 0x391d4000) syz_io_uring_setup(0x1f0c, &(0x7f0000000080)={0x0, 0x10000000, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) [ 2349.542538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:16:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:16:14 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00\x00\x00\x00.+file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000001000)) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2349.591362] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2349.616114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2349.617646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2349.619371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:16:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2349.757752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.793523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2349.813025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:16:30 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[]) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000100001000000001c59994138a307ea0000000000", @ANYRES32, @ANYBLOB="0400001208001b"], 0x28}}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) r5 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r9}}, 0xbfc5) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8"]}, 0x28}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r3, 0x1003, 0x0, 0x9, 0x0, 0x1, {0x0, r0}}, 0xe466) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x81882, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 12:16:30 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:16:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:16:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="25d169bfbe680000"]) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x160, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x401}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:16:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:16:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x6, 0x4) r4 = eventfd(0x10001) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000100)) fcntl$dupfd(r3, 0x0, r2) fstat(r3, &(0x7f00000001c0)) 12:16:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001e00)={{0x0, 0x7f, 0xfffffffffffffffb, 0x28, 0x2, 0x3ff, 0xce, 0x1, 0x1396, 0x8d, 0x0, 0x9, 0xfffffffffffffffd, 0x80000001, 0x101}}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', 0x43, 0x102) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r2, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000001300)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index=0x1, 0x5, &(0x7f0000001280)=[{&(0x7f0000000080)="5802ce83f101eaffd9acf7e9e57da9976886ba2f39fd6e0bc0c552029360ac1e1703a274e70fd9fba85129", 0x2b}, {&(0x7f00000000c0)="2440cd6d2e0676aa3815d6468b5ccc435ce8c0f3ff430d9634841903abdbf5ad144d30714f9952549e7ef74a5a9e007f0f037076c0d3d7c66c733268a1356bab955038d7b924c6ba406da3accf18c45b5af4846bed61ef2b2ae73d1c0fb79fa02aae29a51d8b73fca09e81", 0x6b}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000140)="c0ce03817e2b3f92281682c6688c52e3bfa84db1735eb0762a9996e34491285563b64fe0d11a9f955d1e", 0x2a}, {&(0x7f0000000180)="ac98350ab056d7051955940b76a70f4313458a26543ea60d1d508f077948554cf5e2968ac781a15d227e42fc9cad1420f4a3e933b5ed1b040316ddd06378cbd4d6a7dc13f6b79ee8338055767b565eff2920e3cf32b5678a59931b7486ec097fb5f3f0794743b48f77e1e338148673d82ddf6e6af54669a12e5474014be8fb963d4d213531cc38e2c8be444e6b7c64c41620b6d86c90f5a7f66a3fa9df70c690e294474ddecd", 0xa6}], 0x5, 0xc, 0x0, {0x3}}, 0x5) [ 2364.817067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2364.845115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2364.853788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2364.882929] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2364.885377] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 2364.887227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2364.898711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:16:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="20668b363bcfc83f08782470fc4987716777df9f54cbc8bd54c5c5f8b51973d9145fee6c797eb3442965591e123cf5a0f572f67b374c167252104f081ac8b6080605aede4aa4d52283d7b63f45103daa858cca078318204e0cca61e600a2b871277ca285b0c460a098d56490b68ac805a97577f77e1d5c2317d88912f030ee5ad3aaa271f5cb1680fd1a467911920c08d250db2ee9dea60b1fab165aeca10917bf25089eb70af081eaa3ddc5ffe836d6d786c72239aa66da3dea4199edd965ae1bfe878bba4051b25a7c3b01724f3dbb34b2354f34577cd4e261aeccc199eeac19baa052b7b8b3895543cf653aded925c260f627b87e6b1db3ed4b09b24f4c93032374fa37ca30abedebc66af78063729b972c0373624327fe8533eb4724690e48f887ca6484a25ae0b885743f680e644c7d0caa9f4a793ac1fc860c5f2304125d28c9792cd9bd76ff148252cf00d3fc92f83ff6d25fec0064ee6bdbe107822915"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000001000)={0x4, 0x8, 0x80, 0x52, 0x3, 0x5}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2364.980987] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 2364.982616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2364.988786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2364.990513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.012135] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:16:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 12:16:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r1, 0x7002) socket$inet(0x2, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x7, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0xb9ecb2466d696ad8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x4417d}, 0x0, 0x0, 0xffffffff, 0x8, 0xd1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f00000000000000010000000100000000400000004000dbb28225c23f74b879e0f4655f0100190053ef010001000000dff4655f000000000000000001000000000200000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e3}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="766c3c00000100b8700737b220cb5f6d6bf656d677ff00000000"]) 12:16:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="001c696c00cd1bb592270855e20035f63a3b26"]) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:16:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:16:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2365.248525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2365.257776] audit: type=1326 audit(1744719390.602:51): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2365.288273] audit: type=1326 audit(1744719390.602:52): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2365.322393] audit: type=1326 audit(1744719390.602:53): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 12:16:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2365.337869] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2365.351307] audit: type=1326 audit(1744719390.602:54): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 [ 2365.388220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.405764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2365.407071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2365.409781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2365.422395] audit: type=1326 audit(1744719390.612:55): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81a34fab19 code=0x7ffc0000 12:16:30 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x42f}}, './file0\x00'}) dup3(0xffffffffffffffff, r3, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2365.462126] audit: type=1326 audit(1744719390.612:56): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f81a34faad7 code=0x7ffc0000 [ 2365.473657] audit: type=1326 audit(1744719390.613:57): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f81a34adab7 code=0x7ffc0000 [ 2365.489295] audit: type=1326 audit(1744719390.613:58): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f81a34adab7 code=0x7ffc0000 [ 2365.504566] audit: type=1326 audit(1744719390.613:59): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f81a34adab7 code=0x7ffc0000 [ 2365.523466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2365.527408] audit: type=1326 audit(1744719390.613:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27468 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f81a34adab7 code=0x7ffc0000 [ 2365.541891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:16:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:16:46 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) 12:16:46 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:46 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:16:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) syz_io_uring_setup(0x6ea0, &(0x7f0000000140)={0x0, 0x3cd2, 0x10, 0x1, 0x106}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000480)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000400)=@pppoe={0x18, 0x0, {0x2, @multicast, 'batadv_slave_1\x00'}}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) openat(r0, &(0x7f0000000080)='./file1\x00', 0x16200, 0x52) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r9, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xc60d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/processor', 0xa0, 0x2) sendmsg$nl_generic(r10, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="e00000001500200029bd7000fcbddf2510000000f0f7a16d94390ec1624342b1a9f47cd4bf3810f289f5af813903aa99fe96bd92cadad6113294df089c14975c0116ba6f0e908755e288b2deb650e6a375a125f0496130e78a58d6e560f87a5214a56d65d72505633415ebcf7a6edc899d8df2a607fee1b8c1c4112ea56c660f69fb4c79005e3f6657bd7bc782769940c95040000000000000008dd5f177c96736944160be63fab015bc40056659c65bfc394b60f6357e3542b66d498c0bcf6b51cbc02529b0c60930fb0c006c000000000001000000009cfd15d3ebf08e833dbff2495072b856826a1d83eb08ce0529000000000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:16:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000001c0)={0x1, 0xdec}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0xffffffffffffff83, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0, 0x3d}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r7, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) syz_io_uring_submit(r7, 0x0, &(0x7f00000011c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @loopback}, 0x1, 0x3, 0x1, 0x100}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000280)="88750a283e72cb0127f9b0f3077c70f1e688c141ddf9ad0c26622480bcf7896d8eb386e31e01a547c36d06d0b54f690b3992c517fabc9ea1a5aa3b00ae7ca3dc8ba2036d10894db7c9f759e2071d9f890e0bcc6d12a28e9fd4", 0x59}, {&(0x7f0000000300)="cff7068daa14b7e155d0d7466a575e7022b00ea57d4ec520c67565e309551c6699aa06240b22890ff38c28a7517e3d318ea0dfb29a86330e860356befa8ca7641ff3a62bea35a83ed2fa6108bc966a09eae55c38d8aa4dc00f730b4cb12fc1e6bb569482ce4765d9dddf87b6fa1bf3e0dafcbfa788f9582fc4562b7e0d39c761d5fc", 0x82}, {&(0x7f00000003c0)="223d76ece7e0b35f2afbd1ecefb2dd38b3ac31218941425087851fdd17d3fd947fb877424ed4a7bad9169928f33d66b86ba015d2d4e9227fafc4b8e3415e13f346906c3dbe2883a4d26df7c8b513b7ad4f858eba112ee1668f8cd397f3a14ddf180f0357df944b69b4a5d19a14032358c0d02720ce04a60d348707d1b229b4376ce31ce3b6169beb5aada4b7cafdab5cc9e016a38c0d5b55a58dbeebdcd200c5d061d0f7b4653b8bd3a136c478d5d625d941dd400793531e733d25528e4d2081a38d5d66adfafaa7828a42563654122b91cfec487e5ca4", 0xd7}, {&(0x7f0000001000)="a2ccde2a226b0a1ab1ee52b49f1e6b47e220fa025ce24d0d2cf2b93ceb25cefc7458ae79ec470ee4be360f8cbaa2ffa8d977262fe34c250738d3a838f757782a0dd9334b7ade25781ef833dfd1015ef26755c908ef837537a732d6fa061667194a1673cf4ad12788d7d31277836686060aefb30348337c9c2e2c6f9ffd721556e4f53b1928fb40f96587a5d58fda3f173c90589469128f4b33f5466bad6b4b4162fcf86d8c9962e90e9aecd02c9fbe278e8442a4103df8aec01690c33dfd0fda699c41388c5fe3acfe1849d3d0c85b75420d54e80b928a", 0xd7}, {&(0x7f00000004c0)="96560ae5c6d34fb267556178294752668ebe5d4a78554442f1175b2b4e11a000f44ccfc56605593a5cc4fe27e27324bc20c5c6fb8d82fa52db84a771302ae1265436bdf43ad2e18d261f0e7f6b5d01b91b608d6a62008a14386113737a1c6bc18cce87474a63c8cd1e521919f463d93334b1f58dc18215f3366b23252ce58892037f9101c245aebde94cd737", 0x8c}], 0x5, &(0x7f0000001e00)=[{0x1010, 0x110, 0x7, "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"}, {0x70, 0x319, 0x7f, "54b9cdfabc73268a0d1763384e44a2d8fc78d2c89edd7eeffe36f6cdee0812e80c17a1b0fd7a4735ae2cd6b14bd711980bd59828cce98c8fa39c86955989a37a0f1ef31a262113f3e3f8e0140745a36d44572363d33cecb73b"}, {0xc8, 0x7f81cb9bf8f905f6, 0x6, "67729f32b23ed40ef36bf53d552f5a8dbd6cf9018f5c05693e3d0e96cc3e6b975d79b59136233a3ef9dc5ae620a06794f561b3c68821e38350e8efb01cfa89a9f93f377c3a3f19df4f3fc1b2210526e85223f6441929760f3b23ccee3f2ea8b15913c0074ab89e56e50b82cd0c0218f7972aa30f603ecbac40b07a5ee7bb925d84b0ff7a9821fd8665297714423680cae6179a1ff97a1cb4d46fce0bfab40a8b4396d1623ba886f76331f27429435010d14c608726b761"}], 0x1148}, 0x0, 0x80}, 0x2) 12:16:46 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4004, @fd_index, 0x5, 0x5, 0x5, 0x4}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) fstat(r6, &(0x7f00000001c0)) 12:16:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) [ 2380.993013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2381.057088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.111789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.120051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.121818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.124576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:16:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000200)=@v1={0x1000000, [{0x60000, 0x800}]}, 0xc, 0x2) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) pipe2(&(0x7f0000000240), 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$CDROM_DISC_STATUS(r4, 0x5327) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:16:46 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r7 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r9, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r11}}, 0xff) setsockopt$inet6_tcp_int(r6, 0x6, 0x6, &(0x7f0000000080)=0xdf2f, 0x4) [ 2381.255663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2381.430808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:16:46 executing program 5: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:16:46 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) statx(r0, &(0x7f0000000340)='./file0\x00', 0x2000, 0x2, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000240)="0994a329aec810ff9f07a05bf12ed7226dbc524932be1856f510ba06d890ead6599582fd919f436f4bbf5e13dfface165471e75d58d53dd9b551f3fa5f558104898a09e7f2761d15e648cc5278f6d9c0e453915cd01ea827172ceda8631609ef9b215ea3385b29a663cab4ef69d86f2086d7ac6cf98a3fefe67d7a69b16b850ec0c50e20304140000ecc8a2ec77eecc9c3ca2b89c7abd36aed2b56ff9f54829e399f94d64c88", 0xa6, 0x3}, {&(0x7f0000000300)="5403f1f18100339e63a4ce5395dee0a26fcb268a27df80de4c8f10dd4c029ebd0827261af3693a76e57497f7228352401c625783b1fd98409d", 0x39, 0x1}, {&(0x7f0000000340), 0x0, 0x800}, {&(0x7f0000000380)="0a1a3e8d5025fb8282f4261d17a3abfb30f3cbc73824751afd9246ec510c5168fc89e4983c4f4687ce07d1818d76b2f06adb8731b3fe71eb16219ed4389cc21b90a389fd0b072a654441b268d760052a9a6291f14f91dfd5ee2e873ac387b9f4d9ee99a679f42a5cb3f9a50a5a1773a765f599a72fe70575c94b34a1f0fcb7110bb10d8e9c88eed25989369365cd70fb833941f6138a4ceff53f3b6540a8a5a729fc6584eea95b25253521473d74cc3d29f8ef98ae9ef1477b1b94f1cce09d5911990de86a65f0b24859897240723b50f2e8a09db2c0eb8bd3ed17deab48d671666de051aeab4421cd58e3ed", 0xec, 0x6}, {&(0x7f0000000480)="08d63b45a238dcf9e6aca9c8fd012b5032ae", 0x12}], 0x4080, &(0x7f0000001000)={[{}, {'&'}, {'security.selinux\x00'}, {'\xfe!&+.'}, {'/dev/nvram\x00'}, {'\\[$,%\''}, {'$\\:!&[:^@\xf9)]&/\\+\')'}, {'!'}, {}, {'}'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) close_range(r6, r5, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r7, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2381.594595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.596231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.639482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2381.653035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2381.662873] loop6: detected capacity change from 0 to 4096 [ 2381.700154] nfs4: Unknown parameter '&' [ 2381.761963] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2381.834783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2381.836352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2381.838439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2383.377963] hpet_rtc_timer_reinit: 25 callbacks suppressed [ 2383.377972] hpet: Lost 3 RTC interrupts [ 2383.560714] hpet: Lost 4 RTC interrupts [ 2386.520286] Bluetooth: hci1: command 0x0409 tx timeout [ 2386.712252] Bluetooth: hci4: command 0x0409 tx timeout [ 2388.568262] Bluetooth: hci1: command 0x041b tx timeout [ 2388.760288] Bluetooth: hci4: command 0x041b tx timeout [ 2389.336883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2389.337971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2389.340152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2389.389952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2389.390878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2389.392224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2389.489956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2389.491258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2389.492723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2389.522614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2389.524423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2389.527264] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2389.564979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2389.577037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2389.658248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2390.616249] Bluetooth: hci1: command 0x040f tx timeout [ 2390.808275] Bluetooth: hci4: command 0x040f tx timeout [ 2392.664314] Bluetooth: hci1: command 0x0419 tx timeout [ 2392.856259] Bluetooth: hci4: command 0x0419 tx timeout 12:17:10 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:17:10 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:17:10 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f6610dc945000"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:17:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffff7f}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, r3, 0xffdffffdffffffff, 0xffffffffffffffff, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:17:10 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="011000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x3ce}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1310, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x20, 0x1}, 0x0, 0x0, 0x1f, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4, r4, 0xb) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:17:10 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="e8102a03af0ded94832db7c1555eae5dd02f48f78b7b0c33c18246d5ee2588b939da9c367279d7c838871bed3a10cb15413d6ecb550a2e5893be0ce09ac4a68f4c5fe9a14323640fd8dcf2cf0aae02797fff731b093704afd4c7a3d530de7bc02cee5d9e41417e07b6a4178765bf0e1d9fe416a6ea83b2dfcf0d79c5e74d241f7ff99a98d9f8741f468f27ae4b933f74bb7f12435662ceb177f96e24ada454aea272309c21bdaad3831b06864e973905d646a005d424ec51fb0983777325b24e2c6f6663fea47d092288c0984906769376850a6233674fc4f92c0cd4336940c6877029d53b66b296d481de821760da79e259c4ad32bab095fa7da2e37e7a003eadd53cafe05fcccb84016a7f3241fb1dbdf0", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:17:10 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) futimesat(r5, &(0x7f0000000240)='./file1\x00', &(0x7f0000000380)={{}, {0x77359400}}) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x280000, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="3992cafae69deb793308ea236082003f66c9ad69120f75938efa4674479b161229a51d0d6b522c88ba73fda8e5c4781a26a511ff64f201bc54a1063846fa68d91dd22e19661340d16ed9e819cd1ac612d69b1ab7f707d34d6ca6d6ff4a82e2d23992c8a0a76ff256e1085e9fa890e6d61daba74c3924b1022ce4b3ae59641df0c44190d1440f728bde3985a458d9aa294fc7fdf832e72d35d8fb4d7dd8e3745efb1a2485a540d219ced9efabc88003a3665c1e1df8942745767029577d41dea8", 0xc0) fallocate(0xffffffffffffffff, 0x40, 0x521, 0x6) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000, 0x4000000000000000}) [ 2405.533155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2405.554047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.589080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.590885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.594425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2405.628758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:17:10 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') mmap(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x1000009, 0x20c8032, 0xffffffffffffffff, 0x970f5000) dup2(0xffffffffffffffff, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000100)={0x1, 0x20, 0x1, 0x8, 0x45, 0x3, @msf={0x7}, @lba=0x78}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001280)=0x8001, 0x4) pread64(r2, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) r3 = dup2(r1, r2) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r4 = epoll_create1(0x0) r5 = open_tree(r3, &(0x7f0000001380)='./file0\x00', 0x80100) ioctl$CDROMSUBCHNL(r5, 0x530b, &(0x7f00000013c0)={0x5, 0x7c, 0x1, 0xd, 0x20, 0x20, @lba=0x8, @msf={0x80, 0x3, 0x1f}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x23456}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x90000019}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12:17:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_pts(r2, 0x10542) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) syz_io_uring_setup(0x624, &(0x7f0000000180)={0x0, 0x8eff, 0x10, 0x2, 0x128}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000200)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r6, 0x0, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r7, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xffffffff, 0x3, 0x6}, 0x10) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000040)) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYBLOB="f209dcaab9ecd0c89453a600006f00", @ANYRESDEC=r4, @ANYRES16, @ANYRES32=r3, @ANYRES64=r6], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:17:11 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = dup2(r0, 0xffffffffffffffff) read(r1, &(0x7f00000001c0)=""/202, 0xca) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2405.693736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2405.765819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2405.875269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2405.876882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.880459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:17:11 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000c49e3c3f980000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000001c0)={0x30000008}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:17:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x2) r1 = dup3(r0, r0, 0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x1b0, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfc, {0xd}, [@typed={0x5, 0x59, 0x0, 0x0, @str='\x00'}, @typed={0x46, 0xe, 0x0, 0x0, @binary="3213920e53ef562a23b3af3fabd31ff544551b92995e2b666dbb5909d5e7354c4b76e3feea47d61cbf51bf7e06c441bddf0603a711036b237683d3ea43574e5d02a7"}, @typed={0x4, 0xb}, @typed={0x8, 0x3b, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x5f, 0x1a, 0x0, 0x1, [@generic="eed1fb39e950d691e8300bc47251ef5937e690a72228544a21d341327c87687bed65038a358fa08bd1a627fbf6fe2427ea562e1f76b99de3828304389009e702f5acd4a03d8eb78e7ba6a7813d7211", @typed={0xc, 0x38, 0x0, 0x0, @u64=0x8}]}, @nested={0xe0, 0x15, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r2}, @generic="27ab1132261510226e17914e2d553095c26761e3cc0b78d01a93678ef3a7d0fcbfc504a386a70d04d7e3084822e2564587683089bc6951d32b2c7707711efd86c2cd8bad86990674a49d8c3f22f994", @typed={0x5, 0x3f, 0x0, 0x0, @str='\x00'}, @generic="ccaabe620a7530197785aac9ebb32712f6032d4699fcca36e8488a498d81f9aa43188c0c93f2e5221affcf17ea1b98ff779edb0de22dfc4a543a112cb1371e820dc82b7628fc01b0bbd61e45c14a42eaaf7175dd008ff55691f2091c82ac7dfa06c2c08ca050c318d4d800a5337f06d4c15e5123fe24db4437a2820a17"]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x91}, 0x4000091) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x4a, 0x711, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 12:17:11 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) openat(r1, &(0x7f0000000080)='./file0\x00', 0x181442, 0x40) syz_io_uring_complete(r2) clone3(&(0x7f0000002000)={0x19a038000, &(0x7f0000001cc0), &(0x7f0000001d00), &(0x7f0000001d40)=0x0, {0x19}, &(0x7f0000001e00)=""/175, 0xaf, &(0x7f0000001ec0)=""/222, &(0x7f0000001fc0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r0}}, 0x58) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000001c40)={0x3, 0x80, 0x42, 0x68, 0x13, 0x20, 0x0, 0x401, 0x10000, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1e1c80, 0x0, @perf_bp={&(0x7f0000001c00), 0x4}, 0x400, 0x3, 0x2, 0x8, 0x4, 0xcd2, 0x9db, 0x0, 0x7, 0x0, 0xae6}, r4, 0x0, r5, 0x9) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x4, @perf_config_ext={0x4, 0xb}, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0x402, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0xffdffffdffffffff, r6, 0xa) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002480)=ANY=[@ANYBLOB="bc0200003300000128bd7000ffdbdf25050000006a0001000ce6ac811a23b742cfbb9f9576e1aec15f943963e7d7535bc069b4190d2ec3423fc952c9602764157f5ab0b82057ce442fa4bb6ccdaba4520b8af7ec8e9a0d2a9598dd3f8c5664e9b66e5068e4beac79dd68065bd8437bb312d37940e64e5fb55d7bcfd367ab00003c028f8008003000", @ANYRES32=r6, @ANYBLOB="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"/726], 0x2bc}, 0x1, 0x0, 0x0, 0x8001}, 0x800) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) perf_event_open(&(0x7f0000002080)={0x1, 0x80, 0x8, 0x1f, 0x9, 0x1, 0x0, 0x8, 0x180, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x304b49ea, 0x2, @perf_config_ext={0x4, 0x3}, 0x1000, 0x7ff, 0xfffffffc, 0x2, 0x5, 0x90, 0x2, 0x0, 0xe0000000, 0x0, 0x6}, r4, 0xc, r7, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0xa, &(0x7f0000001a80)=[{&(0x7f00000002c0)="0c13cf7908143d4334cb979ec6822614701d42473e30348392c60ccb6d3c7c077d29bf61259b8063d08c5167cffd610904292999433962349b8425c761b5553f3288200ac9b1360fd94273476e16d6a6aad417595ba9db607a9af3548417b21b73e603ce102c972b7c02823010b33724c830f329b92753d2199e3fde0c26f505a8857ae049e151a8b38e1fa10f23245b2413cf0b79052e1fe87a0aeeecded9f682ce1fc2780de14b3a780630407aa5f00cbaf2024c91bbbe52ecfbcbf7f70f4bfee4c73a151ca2b330bb1360b1ef1d88104d28682b5cac55e06c8ec389cf0c92b5fc1c1c90185e2973e0777c71c21e85da0034eb1f401f0a66d1075d", 0xfc, 0x4}, {&(0x7f0000000700)="d9672e583446f95e37efa781722d859759e000396b2334ef1643bcf79c92313576415483231d9f0e2f395b29f49a7ab669d450147b36708bb4d2922e4d0f1d3ef048ac4ca648d2cf810dfa632e0e31e5301d3c5416b8d2c20f9623b001ae336986ffb3175ce2ab77eafeb3e4da6345ff96009e893194f74d04f69b7b190f02d4c33f0333e822d5ef04e9950dd0d4e7fc9fc04d1083d726e13b76c198412c7281913bdefa85", 0xa5, 0xfffffffffffffff9}, {&(0x7f00000007c0)="22ff76e93981d4a4ea6fb62a4dea55de80b246feef804b867aae1906103c38d575b123e3c4b60291d3c94b8ed21c0d2f4da45c73a3c3996f4e5dec65488694b1137223b780ad83a6f333f9320d896a1c278eae82bed0f73d8e26e8a67eb006bbb3c325e9bbbf08c19585088f6b16393fa80bd1d89b0aa856c71c2ec729f807d8a842917127ae32e07ae639b5a6826a32490452242a0672ac4d79921be7da424882806e792d7a67944f1d6d4cf023f67041ddabed445b8088e14f718891bc38201ef07ba7b63436a922ef76e5267bbb620423a62531810159bee55e1d0257a58042399c17fca137ce6c489d50b93ed43f59f4f2c550f75deac64b", 0xfa, 0x3}, {&(0x7f00000001c0)="44cbdd3b163f75203260d7910a10cde026ce8715d1ac", 0x16, 0x36}, {&(0x7f0000000200)="0e73dcff2642526424ba8d252d0641e05af0916cc5165fb520f36a5bb2f7", 0x1e, 0x8}, {&(0x7f00000008c0)="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", 0x1000, 0x6}, {&(0x7f00000018c0)="0b2b349055b8f1a57232afb7b10ec084c6387f1f8751bf75b894b2905033c5552103e06fe7a0d16129ff575570a046dbde6d1dd3d9e1dbf91708e23d3041ddd0b779b4719e8b5c6e7a6c4f2bb888f065cf6ff20825eef5d93b76d6ab2e9d7487b240f6666b33be18571577567ad82402fe8c4b76714915afc66478384ae835ccd8cbd8", 0x83, 0x400}, {&(0x7f0000001980)="dcf0b22fb7db50470880fc1a8bb7e63fc969d6fbea6ffc4245c4be031bc8bfbe1581fc17bfc79551f0a757212ef23e292e6310b3856e4e59d1305b1e10bcc588eea18aab9e72aadab61622d570e8c9c72546cd3c", 0x54, 0x1ff}, {&(0x7f00000003c0)="1d078e0dd42e8e537802", 0xa, 0x2}, {&(0x7f0000001a00)="e3ccfe2b77537f00cedc3d8670d13fb3c56845ee935b647bbf76e6995f79583846ac45b1b2f1c3c3511dcbffbcd735559de13faf42d8c984e512ed0b51c8548598d992aa9b1bcfe87e6491acf3195aff0609706d762bf9d33cc8a179f7", 0x5d, 0x7c}], 0x400, &(0x7f0000001b80)={[{@sysvgroups}, {@grpquota}, {@sb={'sb', 0x3d, 0x4b}}, {}, {@noquota}, {@data_journal}, {@debug}, {@journal_async_commit}, {@delalloc}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}) [ 2406.059586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:17:11 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f00000042c0), &(0x7f0000004300)={'fscrypt:', @desc4}, &(0x7f0000004340)={0x0, "3e700ef5d989eef23daa1835bd9f6852800905ce1e320ed8cac3e312cd13f1e8aed9df80e54b69aa89cd2610109c361c71ba54959adda5a3619f7802b8fd8151"}, 0x48, 0xfffffffffffffffe) keyctl$update(0x2, r0, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x40000) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:17:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2406.152541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2406.256728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2406.258556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2406.260635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2406.260812] loop0: detected capacity change from 0 to 8388096 12:17:11 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xd3b6, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0x0) fallocate(r3, 0x0, 0x2103, 0xfdef) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$binfmt_aout(r4, &(0x7f0000000300)={{0xcc, 0xff, 0x4, 0x13f, 0x157, 0x1f, 0x175}, "d1b6e0834cb1800ebdea7437069cf965e8b6588955c4f8e5f3ad0b1186beecda2a14d2eb4bd9e406b18c03d0c58da48b26f7d586fae40e45fc702fc0a23a018c08e2717c72e2ba5dabcd8cd04d144619fed9f9afcb7b2c6f2b7c3b1809dc333d8ee580cf9a130a5dfb77", ['\x00']}, 0x18a) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) [ 2406.285304] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 12:17:11 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2406.354534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2406.368730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2406.530429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2406.606694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2406.608000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2406.608979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2411.224244] Bluetooth: hci7: command 0x0409 tx timeout [ 2413.272255] Bluetooth: hci7: command 0x041b tx timeout [ 2415.320268] Bluetooth: hci7: command 0x040f tx timeout [ 2416.233710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.236208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2416.239111] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2416.303947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2416.305963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2416.309680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2417.369297] Bluetooth: hci7: command 0x0419 tx timeout 12:17:37 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:17:37 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:17:37 executing program 5: syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0, 0x3d}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r3, 0x0, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)={r4, r5+10000000}, 0x1, 0x0, 0x1}, 0x3) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0xbcd, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000ebf4655f6cecffff53ef010001000000d4f4655f00000000000047b3a9a299826bed00000b00000050a47342000400000000", 0x5e, 0x400}, {&(0x7f00000001c0)="4a9885522dc219c6dd24f41dde3cdb8dee916cab444910", 0x17, 0x6a5}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0017618100000004e791fdc76e047803cedef94bf56d0305cd94"]) 12:17:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:17:37 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x3b}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414fb, {0x2, 0x0, @broadcast}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r4, 0x7, 0x1) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x64, &(0x7f0000000180)=0x46c4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 12:17:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = dup3(r0, r0, 0x80000) r4 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x5, 0x4007, @fd=r3, 0x3, &(0x7f0000000040)="15d8fff0", 0x4, 0x15, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x7, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3}, 0x8001) io_uring_enter(r0, 0x58ab, 0xff30, 0x3, 0x0, 0x0) 12:17:37 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001e00)={{r0}, "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"}) fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xfffffffffffffe64) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001640)={0x178, 0x7, 0xa, 0x301, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@log={{0x8}, @void}]}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf7}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0xc9, 0x7, 0x1, 0x0, "b738183a9d0afa75d2994e0d65e27e673f684a61a481e4be429f0c4532871ba0f46ade50c41a66ef2939ddc7ad9453c6df126b287a0b491880c7cb3474e08217b2ee1858fcf9b3d0d0a1a799121ef8e496db64dab1dd1abdb5f49da114a4a3b4b9988ccf00fe42c69a7246e935653158a2c21bba0f6db282aa2c015a7f7e8cbdddd376f2616dd372c47b0c1541510e063fbc20bce50e79aab517c04836de9bf7525ff1fa944c83439f09f0798ff3c3e42012c5979aa39531eaafc03d4ed3c63230c3dfd549"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x48000}, 0x24000001) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x4, 0x4}, 0x20}}, 0x18) r3 = openat(r2, &(0x7f0000000040)='./file0\x00', 0x16d1a2, 0x1e1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r3, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd, 0x7, 0x3, 0x80, 0x0, 0x0, {0x3}}, 0xffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 2432.643884] audit: type=1326 audit(1744719457.988:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f014b5b19 code=0x7ffc0000 [ 2432.654429] audit: type=1326 audit(1744719457.988:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f014b5b19 code=0x7ffc0000 [ 2432.670934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2432.673744] audit: type=1326 audit(1744719457.988:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2f014b5b19 code=0x7ffc0000 [ 2432.675125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2432.680376] audit: type=1326 audit(1744719457.988:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f014b5b19 code=0x7ffc0000 [ 2432.687875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2432.706822] audit: type=1326 audit(1744719458.015:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f014b5b19 code=0x7ffc0000 [ 2432.711420] loop5: detected capacity change from 0 to 3072 [ 2432.725949] loop4: detected capacity change from 0 to 16776704 [ 2432.727514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2432.743499] audit: type=1326 audit(1744719458.018:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f2f014b5ad7 code=0x7ffc0000 [ 2432.748011] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2432.767339] audit: type=1326 audit(1744719458.040:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2f01468ab7 code=0x7ffc0000 [ 2432.807004] audit: type=1326 audit(1744719458.041:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2f01468ab7 code=0x7ffc0000 [ 2432.836255] audit: type=1326 audit(1744719458.041:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2f01468ab7 code=0x7ffc0000 [ 2432.861697] audit: type=1326 audit(1744719458.041:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28997 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2f01468ab7 code=0x7ffc0000 [ 2432.869940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2432.871595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2432.874635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2432.886860] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 2432.886860] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2432.886860] [ 2433.004650] EXT4-fs (loop4): mounted filesystem without journal. Opts: noacl,,errors=continue 12:17:53 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="e8102a03af0ded94832db7c1555eae5dd02f48f78b7b0c33c18246d5ee2588b939da9c367279d7c838871bed3a10cb15413d6ecb550a2e5893be0ce09ac4a68f4c5fe9a14323640fd8dcf2cf0aae02797fff731b093704afd4c7a3d530de7bc02cee5d9e41417e07b6a4178765bf0e1d9fe416a6ea83b2dfcf0d79c5e74d241f7ff99a98d9f8741f468f27ae4b933f74bb7f12435662ceb177f96e24ada454aea272309c21bdaad3831b06864e973905d646a005d424ec51fb0983777325b24e2c6f6663fea47d092288c0984906769376850a6233674fc4f92c0cd4336940c6877029d53b66b296d481de821760da79e259c4ad32bab095fa7da2e37e7a003eadd53cafe05fcccb84016a7f3241fb1dbdf0", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:17:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:17:53 executing program 6: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semop(r1, &(0x7f0000000400)=[{0x1, 0x7, 0x1000}], 0x1) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000380)=0xfdae) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, r8, 0x100) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=0xee00, @ANYBLOB="02000000fc5adacbb2b4e5a7152a972eadd10ecf2b84474bb429405fd1d2b05a3722fd88b23a2ca840946f5733bc49f28115e64f23a5fbadc740e361e1348a60ad984983431c190f8a12af8a2b9a7274dd35b7b70254e16aeafba67bf11cf4552f6063e51951c8e0a346e7abcd8cd53cae00d70dfe6324f59a4afa47be11546a80fbcb6d22236082ab5cef5386b2247cdd436178cd179f2b70b57f6a05ef05b62f836eedea983bcdf4028414269f76d6dd161242a941d73cb3de6d5f6b1685e9864ac3e20039618eee9acabf0450bad169dbab3f4f00c52048c22eeeb5d686388d56a5763fb4584d4f3a3af2e314fce63bd9046f3c6c91f32433", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040006000000000008000000", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000400000000002000070000000000"], 0x6c, 0x2) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 12:17:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0], 0xfc}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001a00010100000000000000000000000022ebef7abb62eb8cebeeaf94c1a45dab5cd48636"], 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x1c, r3, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000129bd706740ffdbdf252b928107b1799f41d221000008008300", @ANYRES32=r8, @ANYBLOB="0c009900060000005d0000000a007e0001010101010100000400d60008000c00640000000a0006006590b0b8841700001e01940000100d06000000000000008100b2000c000000060001000000080000"], 0x6c}, 0x1, 0x0, 0x0, 0x20048814}, 0x850) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0xe8) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200027bd7000fedbdf254c0000000c00990000ffffff3c0000000c00580063000000000000000c00580048000000000000000c0058003800000000000000a52c106b10a9635bd683031d55757ed6faec6c1e7a043deab0c309ea04fc9fdb016e31b0de1474ec1bfd54a5d0f4b19d0a76ff6f194c9062d1d81b5a011cdb02e1502b0f821d10320ed9731bb5d6c1f7168bc1e7"], 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) readv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000400)=""/253, 0xfd}], 0x2) 12:17:53 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:53 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:17:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:17:53 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000005030000008b6c7538ee74941d79b81db85a89bb2752118498fcdf803e237565ff149b0410798eaa07e2cbdc029aa97385f7dc8615c0d1c2d6b1e3f53413007500f0dd97a16a75a2ce765872addb9dbc5aac4052717f6fd929e2aa00ce51d7d4854f31654686a80fe7088b2dc077a947b425dd6002c0b0acaeb299912fa909fbd090c50b2c6d976a5abdd4cf1415c50a833c54f57d655835e7ca7064472caeac31f727582b046734efbce9e5c004d092091b75c76a77b05cd67543abd4b38d9e88dfb84332babc019f57cdd2b1d8b7f5941e3731", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) fallocate(r2, 0x34, 0x9, 0x5) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x66060200) [ 2448.509740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.509806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2448.520077] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.558548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.574577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2448.605527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.607416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2448.612046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:54 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="e8102a03af0ded94832db7c1555eae5dd02f48f78b7b0c33c18246d5ee2588b939da9c367279d7c838871bed3a10cb15413d6ecb550a2e5893be0ce09ac4a68f4c5fe9a14323640fd8dcf2cf0aae02797fff731b093704afd4c7a3d530de7bc02cee5d9e41417e07b6a4178765bf0e1d9fe416a6ea83b2dfcf0d79c5e74d241f7ff99a98d9f8741f468f27ae4b933f74bb7f12435662ceb177f96e24ada454aea272309c21bdaad3831b06864e973905d646a005d424ec51fb0983777325b24e2c6f6663fea47d092288c0984906769376850a6233674fc4f92c0cd4336940c6877029d53b66b296d481de821760da79e259c4ad32bab095fa7da2e37e7a003eadd53cafe05fcccb84016a7f3241fb1dbdf0", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:17:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x236750e21ea3231b, 0x0, r3, 0x80, &(0x7f0000000080)=@ax25={{0x3, @bcast}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x84004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x800, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2448.813083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2448.936590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2448.938440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2448.946365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:54 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0xb1, 0x3, 0x6, 0x0, 0x3, 0x10100, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x60, 0x8, 0x0, 0xf, 0x100000001, 0x4, 0x5, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0x6, r3, 0x0) unshare(0x48020200) 12:17:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0, 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2449.075889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:17:54 executing program 6: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semop(r1, &(0x7f0000000400)=[{0x1, 0x7, 0x1000}], 0x1) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000380)=0xfdae) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, r8, 0x100) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040006000000000008000000", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000400000000002000070000000000"], 0x6c, 0x2) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 12:17:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2449.162495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2449.209877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2449.227843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2449.245142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.246836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.248704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:54 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) 12:17:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9b48, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:17:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0, 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:17:54 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:17:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2449.456424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:17:54 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) getdents64(0xffffffffffffffff, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1c00}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x20008080) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:17:54 executing program 6: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semop(r1, &(0x7f0000000400)=[{0x1, 0x7, 0x1000}], 0x1) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000380)=0xfdae) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, r8, 0x100) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040006000000000008000000", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000400000000002000070000000000"], 0x6c, 0x2) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) [ 2449.482258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.484049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.485782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:17:54 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0, 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2449.565751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=29101 comm=syz-executor.4 [ 2449.578862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2449.661472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2449.720616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2449.721503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2449.722705] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2449.775670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=29111 comm=syz-executor.4 12:18:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:18:13 executing program 0: mount(&(0x7f0000000140)=@sr0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hpfs\x00', 0x2240002, &(0x7f0000000340)='{+\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000049c0)={0x2bb8, 0x0, 0xa1d, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x7b}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x340}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_CSA_IES={0x1fa8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xf000, 0x81]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x204, 0x7f, [@random_vendor={0xdd, 0x1f, "e55790015203dc03c93c2e2a866d0db1c6e286a4aa8a666333c40fd50b973f"}, @measure_req={0x26, 0x2e, {0x7, 0x20, 0x1f, "c1175068b381c23b45274679fa03e7a328042075518e0c622b4c49e8b70ee8ef6049c8fce46075032fd736"}}, @measure_req={0x26, 0xe3, {0x8, 0x7, 0x9, "cac534ad72c6c3b4e5c8c256b3fd893dde07c411384f301c08d91d499a73656fb5eabe171d2e672c6ac1577b624b8c458a621477fbde200318217d83a54db0bff37e3dcbf1b97068c27151375d6e8ce43c00eae7df734bdb7ef9f89f10420e20ca2f20a7ebbddd1f9ab0a9412dddc3c230ac73c932216e210cba7bac5feb0a10bad47276cd51871630d8c9efbc41cb6daab1efb09501a60260ac8ba97372a55602270b06eb3c85c89a5b49435ce210724e323e2cd7eb01dcd76e2ece9576a5bda6ccd62126ea0c5d3d5270ec6a23385181ff837cd5769b68ae31df6a6e0ca266"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x68}}, @peer_mgmt={0x75, 0x18, {0x0, 0x9, @val=0x2, @val=0x1c, @val="08dfa4f28bfbb9d8939533ab42fb6e23"}}, @fast_bss_trans={0x37, 0xa5, {0x7f, 0x4, "461a6b73cb65406e4f4e8e3bd4319067", "1bdea51c6415199358b6296dd2d4b7ad40b3e4a75f5ef9985e69f2a41ef845e0", "44d3b50565de93cfd0d77284ecb24136a08b620935bbaf01118c12c11721f0af", [{0x1, 0x22, "0813d82220cf8f9b2f562ccd7cb7bc1f13d206bb404647f1bcd3d173a3f05cd9da30"}, {0x4, 0x5, "998f133807"}, {0x2, 0xa, "b0ea7340cf52f241ce2b"}, {0x1, 0x1a, "53cf172346b55fae7aacd21e9c714655f99f28ad61adf47356ad"}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1078, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x6a, 0x3, "e380fb9d7278446642c9e5f35b676e03fba260ec60bc73114feb48e70891ba8bca0969a8862b1df740eeba88df194d97c50be19d37508b2661c6bd00ed5b3fe08126e430a779d80731043357fd2be48ef068f347dff0dd6c9531226d7600c3e037436d98fecb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x38b, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x314, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x103, 0xf, [@mic={0x8c, 0x18, {0xefd, "37d11ec5b36b", @long="4fc1508bdb42dd25174009e6b67c34a9"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @random_vendor={0xdd, 0xd7, "632faa406e0bc3f891d9f16ae03a3caf5c197b68aac6eb536c30a97096127c7a59e5d83384c3f90b46358da8cf7b1ec48719d63db9603e95b65e4afb383c19b984bd020a5de3cf391bbb5013239ce68b5ddc4148b18bca872f4d908bd1e54916eb27f8b2192d939389928d94c4efedbb851d54371968e9aae811b5983b24f75709c090ce13e07e671508cb0ccce66ce20926593a8b170bf25283dc4ed65068de20360547e699fedeacef2b03c7bec1adf1f46644fe884b6e03d5c411c367cc00d2e40e5bc2d1c01b677dbd8609fafb619f9c751df0d52c"}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x84, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x2}, @device_b, @broadcast, @random="598cbc1f2254", {0x0, 0x5}}, @ver_80211n={0x0, 0x5eb2, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x0, @default, 0x8202, @val={0x0, 0x18, @random="d8962cef6392d0b81811948aacda222947b2ee4bbf402145"}, @val={0x1, 0x8, [{0x1}, {0xb, 0x1}, {0x12}, {0x6}, {0x12}, {0x4, 0x1}, {0x7f1e1c5d6da6639d}, {0x24}]}, @val={0x3, 0x1, 0xaf}, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x7, 0x27}}, @void, @void, @val={0x2d, 0x1a, {0x400c, 0x0, 0x6, 0x0, {0x0, 0xfc, 0x0, 0xff, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x40, 0xff}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xff, 0x4, 0x33, 0x2}}}}, @NL80211_ATTR_BEACON_HEAD={0x39f, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @initial, {0x3, 0x6}}, 0x6, @random=0x9, 0x100, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x8}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @val={0x76, 0x6, {0xa0, 0xe6, 0x19, 0x200}}, [{0xdd, 0x8b, "7b5f488f2ae4bb548771cec37d33ad567186fd7660bba28b9a7c53cb86f5560f646c0630d4749b51e76ecf2d5e3b3efda1e120f6eb9881b0e62b5d8b4326f7459b48b4b085d82d70ba4a13c0ec0ca8724aa2f6d0be8e6f7e0480b584f6c5974b874049182206c9bc9305915feaaecd87fa96260f01abf9feebb9bf7ee2649ed87ee473df96b48afc18d71d"}, {0xdd, 0x5d, "268ff191d55eb3f3a14e4819b3861b5d7aeac98070c3780415d676a7f416472667caeb52bbd19434aca2d935e96110dc8214b9838d745f41d9ff40d4ead909379b3816efde821e6d8237bca7a7f62d935d1186f8480bdb462ed02f3183"}, {0xdd, 0xfe, "6eba220f47abf60109fa1025f93ee0b8b0cd59ef1f5adfd1d633fb5c2072bf987f7c53a1750a2113f6b16ccf11a2c11291f561f450e509b93e3634bc8021e1034c767bd939e6176c4146401445ad113961b3c8038164b02ff78b17b13374eab3f4676227acdbaa2d6eaad838c9bf22d47a58abaf3f4aa5495507c37344d81aeac18594300bc2b7114e9b16a373f771580a853cc22a9ce4f26c715607361026d8efefdd9493b757e924155f8f1e8e435f960b86dd51a46f68f4bdd0b6103fff4ce11c06418d3aa3c0a907049dea53b6a2b911dbe933754eafd4a5033c33f9b27433ef153f8d85de3905746ae8af20a57e8049657c2edaeda0c4d909abf7f5"}, {0xdd, 0x23, "359918a66f94b441d4d2b0e10ef3489d4a9bb0c58bbb52f3aa7ee7bcd3c024969af975"}, {0xdd, 0x8f, "5942036dcceb1aa600d6d72de65b50bca1b78cc4d74fcaddaa52d74e221056f39369ca8b6eae98cf75e7b89eb35ad3ab6be61818897ca7a30007daab6fb3f8f7d25176cc83c3202547006fc7aab6d7c06681f51ba7fb47f3cf2aebdfa825a00548d4f083173ecace70f925f19b61df365362350ae6d1d232af55ac665db9153465a2539db4927a361d1d8a38924419"}, {0xdd, 0xbb, "df60734f0b9bebd2e0ae7cad0f33dfe6f93e853b07049697685d4f59b0416c7c3c0c95fcd4018429b4a802f9342048adc05ec2bb165e514db2d4881e233968361e4c87b66c5dcb0d72da3adbe1cd8eee0cf3bd3212535b03cdb609dc1f74a98ab77cc7c628345b13899c56825abf68f5cde06848ccb04238501e86e95059cd5883d858a6f5524138edc70b687abe3ed873346cce7c5e3bbbd9d0972eeb9d226399fc0f1463563d300ac8e65e50d4b566f73e12c85c5f53cd60cacb"}]}}, @NL80211_ATTR_BEACON_TAIL={0x124, 0xf, [@gcr_ga={0xbd, 0x6, @broadcast}, @dsss={0x3, 0x1, 0x2}, @tim={0x5, 0xa0, {0x7f, 0x4b, 0x8, "447e09ad043820cd1ae675fe2a81784c7899a34a4f94e20c94621dafe8c169442bf1ba04d0287c2d2b857fb2e56def46fd2e32172a3271df15447d90eec7535989e7aa6c825e55f1c61b2c99681211c28f0792e0808c6e2c0c096676d29edd268dba04c794d2e1ee4d412b466840760d5e7d95ad6b16facbf3d6944f2bdf4b4ac24bbec304fc315e3478090e44447fdf1db18f55661a7dcaed6cef72cf"}}, @fast_bss_trans={0x37, 0x71, {0x2, 0x2, "61fb41e4324d8fab0cc78a5e41c36c88", "d28a9d6af5e6551a8218e21f2b62af95617155f17606c29fdef63649dd1d08ac", "ba8e7119a3c860e4defae68880f6eec6d5bae2beec0dd2741abe079c82907cf1", [{0x4, 0xe, "f72767ad5b14aff08681c2c30e0a"}, {0x4, 0xd, "59fe2de33390b22dc6f637e214"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x32, 0x80, [@mic={0x8c, 0x10, {0x913, "9b4c2a68bc2d", @short="da137225410a0123"}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @cf={0x4, 0x6, {0x9, 0x80, 0x0, 0x1000}}]}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0xbc0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x5a6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @initial, {0x1, 0xb7b}}, @ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8587, @default, 0x5008, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0x80}, @val={0x4, 0x6, {0x80, 0x8, 0x5, 0x5}}, @void, @val={0x5, 0x52, {0x4, 0x8d, 0x3, "fda2e64cb0521677499491556223862cabdddc23a3265c0a198cbff445c6bf9b6b86a9d3e2492acec5f523568aaf7539d957f6ab8742e374ab3449aaf28782ac89df40a7e36eb6b77624d1cda90697"}}, @val={0x25, 0x3, {0x0, 0x28, 0x3}}, @void, @void, @val={0x2d, 0x1a, {0x4000, 0x3, 0x3, 0x0, {0x400, 0x14af, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x1}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0xff}}, @void, [{0xdd, 0x71, "0ef3c58e919f55ae22087afe07d5b95986959acd08fd32450b272c6858e738e3f801cec93436a3ac4326b7d37878a2b1a07b019a5da6e836946be8cd917a29dca04d9b432e08c9ab7ea44c79764af4bc16e3b859b6fd32b2d1cc3a6e79bc181751b949264b7ccc6d4c397a051b47d2d935"}, {0xdd, 0xbd, "24b0810d0362cf19328944367556c852b1f6d657447673c28e2dcc393ed6c2a0f2c1ad192f9a6bd0d1b6f31b59d191bf7472687a60af61c94e411a03a5ebc3147d9ed458ce1ae8b5f0ea3087b5dddbdc0568ed9171dde9e27b1e48ce638cf45a2b75770f98a625e6087867f2e61e43e18b5f266f13035d9e722791cbcabb5232b90b511c9e4c938758faa55f2a39d1f3dbdf3d14358ec5e0e4a05bf8da27ab1bfa4d657f6e70971105de83889fb656175b5320261b21a971cd312d1097"}, {0xdd, 0xb3, "d5d488e1614dbee6fad746382c0ca6970d5bb6ee88f72a66f2b4b7120d22e531847b2f90424a5d9286c30afff8a128480483bde60caf87b8b2765fff63010c5f9e95115ec3ae5c0131c625aefdd9cd092a3d3c410148288fb49d10ee0958a0f32076ecf9adcf26e8fc6785c2e4c618a6149df6f7c42122ed7c5a9533c23c404877eb973a470ab5f9aba2f5ffecb605fb3aec99a07214c749a02733a31c76dca4ec667581f0c55d894bd3a3e3fa61c0783f5457"}, {0xdd, 0xf1, "2ab17167a3e2bbb348db37939a94c6da2e7903e6ffe26066cd2d5bc5ada5196630b6bd96661e16402cbf2e1991fd7b5e991ff9ca30a42353fb6838fadb0c987cfe52ed75f5a7654463ad4254b53de6e60ebf065de9be310e0bd2afe6700d7e4bd06023667b94aec52a6082e77443bfc7c7d955e6a1c505d3b177d1da2a5298bd4864683f1d9095926f314536c8c90e3917e0a0eb5a570031cb4095414154847a82d57ad478c52aff742baf1374d1ace916ba0add7ab03ca49ccefcea216b9df9489d33f0239ba59c20cfa44650c7c3ff909baa9571e6ed0c638bc54458e373c110d1407e7c2ba698d629abbcf99c02422e"}, {0xdd, 0x43, "5ea8f9e5c98d9bc2bebaf86388ebb6170de2b9bc01b339ed6e86e7b89dfc676483fdb44c73bd4e9f0dfb4327a47dba1ee9a5cd237b4bcb2f1e7cbf021b20a0ee1d1bfc"}, {0xdd, 0x6, "281baa02da64"}, {0xdd, 0x17, "4299933018ad27deaf0a73bac3562b7be88cea7c28efb0"}, {0xdd, 0x7a, "07ca5568dbc6a826ef0c69c4c841438480e69828b47a8341c4de00020f5911d3285bc9c5a5cd7fb8053fbffba9d284a8ab79b1df7cedb1eeabc4365a98c230ce4e42ecc8bd46ecaaca84665de4eab7abe511cefbf2330b8ea1151e22a3a243607dadc00da5d2d19681866601fcc9d74f096ec1ef88d221d52049"}, {0xdd, 0xd1, "b5fa8ccf613df01b3ccee52452622d5d764bb842120a95d5e8f96c0121d6a21c91d0c34297652c790474a20167e8fdfbe52bd2e297e3d467019ad9ea0387bb6c8a1f4c84533bd9f1a9d26315512fe432a80aa51a56fc98463af495eba8e5d95406f9205020b01dd55cd31eb63764d09190874bbc48d3913a92d89709999d9d9bc738ed8ce8e12593f5f090ed7b35fc5641dd6ed36f6e38238f0f845d82a7fd8ba370bc8867e67a891a48b19c8a8ca61b7589c790bfc1e8dce6fa3fe71fd1bd76086ba4a176a95502cfe91926a5a042f215"}, {0xdd, 0x56, "c437932d01aa99ec1f39a443caf976b142fb8d2c003ede3e87862ba1ef72a384e32854bb6afc311968faa9c1c491b0a5ef1087f55b8499a7fb747f1320fe5ff40e7ece85aeacff2b5b1b2b3b978e2b592e6d619506b3"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x8000, 0x9, 0x8000, 0xf801, 0x8e, 0x1, 0x0]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x5, 0x0, 0x5, 0xe2, 0xef, 0x6dd, 0x1]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x165, 0xf, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @tim={0x5, 0xc2, {0x20, 0x7e, 0x0, "ed77a6508b48ac95937ccca908661d91aa687fdcdde4ce032c6702cad397db497fe1e3103c851a7c11f8d6af14f4b077c84c112c135ad62799a655e402e5874f7a5d496baf08af4203bc3f8a9585b3c29bff4ea9ce223b230271d963a47c456c3c2957cf8c75a64a2f5edd550c4143ee4ca2e0d73b147158768491b80016f342733c27295f94a195544f206505cd6af79252fe24b5fd2810fa26b817d883813505549db09a6732e1beb2014e88a754f2a21ebd6492134d73edf56989ff6df3"}}, @random={0xf8, 0x8f, "9fa130d11d5a1dd95862c6fa16e038103564b2702de6fea6a21902750d7d25fa4669b987c3e2b44bd477df7ce76db1b40cf5f9be1c64efb4f930d3d039a5e105ed74b8d6e5a93bd4970e27c326e81bcb4bcbe19c3b99ed694df33c101770bc660cc505a0659bd0c9d568c308a33176ab6a8d2ed30656d11f4b38bb4a50a2695a841c4d5370a55544d8e143c4f4ca50"}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x4, 0x42}}, @dsss={0x3, 0x1, 0x8c}]}, @NL80211_ATTR_FTM_RESPONDER={0x50, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4c, 0x3, "2203c6ab11da74043dbf0b4596be35fccb0f6af4b537b45560d380d4dcd54c07f43f0e7c757b52e020fa5a29632162d89c1432daf56425a5f6ebcb89b9268162a9a6b3e7b19d8bea"}]}, @NL80211_ATTR_FTM_RESPONDER={0x378, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x83, 0x2, "b9c1e1045bf8b36fc3176f72f1529058d8624a3f6c1b12e2e382622b9685191b8ecf1a8eace02ab571cb49edb6fc753653bb6996f0674f9d9505a9f9b6558c4262601d758123fbbf063565ab0288941b1895befde26f0f586f89ef99b89c38cc2298d71d5d3565ebf46d785d87e7f4281a744477eab71535aaf5832a2638c1"}, @NL80211_FTM_RESP_ATTR_LCI={0xf4, 0x2, "9523ed43bb7e32cf0ca05fe4ddaa37514cc39cb9e3d2379e1a54b748e20deb162eb6f567ccf2c30f32ecd870b847851314f899cc13bd3eedcedb6458b29b7bc11a841b89c73d21e7bc05a2d63c14666ad1bab6db0dca1f49751b43fccb03c6c5de1e09505b32c4f09a4c401a29660e33c2a598f256c888d89f5c9836d2300211abb8d86f5b6bd385517c3bd408e1470a2863ab0116159327ef7aa053ff1a6118ef9d47e7382013c6feb8fbd940d1691653351c588f88ad7fc94ae9244824f2965d5a3a194d60ed9782d54be20490ee92dc41d51868fb60c1e3c1a5517d482f2ac96db6fa888b65a736c232128b525fe1"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x51, 0x3, "f544f498a8350f6e03934fa7ca2edbc85364cc19c793a9e7579199d1f78552e24258b7286cabb0bf4673ea3a2deaad1fe34f0ed7bbc30ee8ad51b1fe7fcbcf8ffb6741a89842fde61a8b6ae617"}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "3735e874ffeeeb6670c8f36b0a0215b10d66806585f90c75e0350935ce00a5fd91974e1d0e99a171c60818042ede964cf90cb1f029865755c66c4304303c8d155f68decc9165fedcba22cc25922029e524fc0fb0de2e4efe6871277791687347e9d4c9b6207c3ab403cf22dc9c45b8bce98384936752cbbff9e803092c1398bf8998886d59b9b82c59787fc2731cc83c"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xef, 0x3, "e7464b05ec87dbedb2513c9a079bbdb44a3dab51385db422ebc15250022c1afe400bf55b7c085803f1ba2aeb639ea65e6ae3ec3ccfd8d47fa9f00e7c27b01e687b8d59d82cebfde5caedd241016aada2b68242a9b6da47d87f87dbf9539b2c46e3b69df3ec442d16e25c6ac30c8774d1d2a19f910d682ff53f50366d646921f0840e54b483729dd90eb610f2442b9dd746d0129a18db6c6d1bfab4da795b0924c857672dd40ac83e10832569c4f8753c9b4fef927f00421e0b687ab81a7947538082f744ea0a467add2e88fb39231748ff08b5437ef196dbdd8f8be6a0cd7de55b58be542b54a08de005fd"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x19, 0x3, "7157ec3ecb9205b3f458bf6bb86f6a647005c8d4eb"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x87, 0xf, [@supported_rates={0x1, 0x8, [{0x60}, {0xef375b84d1154f26, 0x1}, {0x1b}, {0x36, 0x1}, {0x18}, {0x12, 0x1}, {0x60}, {0x6, 0x1}]}, @ibss={0x6, 0x2}, @preq={0x82, 0x62, @ext={{0x1, 0x0, 0x1}, 0x40, 0x1, 0x2, @broadcast, 0x3, @device_a, 0xe8, 0x9, 0x6, [{{0x1}, @device_b, 0xf1}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1}, @device_a, 0x3}, {{0x1}, @device_a, 0x9}, {{0x1}, @device_b, 0x3}, {{0x1}, @broadcast, 0x2}]}}, @cf={0x4, 0x6, {0x4, 0x1, 0x0, 0x81}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x9, 0x20}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x1}}, @dsss={0x3, 0x1, 0xb8}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x2, 0x4, 0x646, 0x8, 0x80, 0x40, 0x140]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1, 0x3]}]}]}, 0x2bb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) lseek(r1, 0x98, 0x2) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, r5, 0x100) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x80, {0x0, 0x1, 0x1}, 0x0, r4, 0xee01, 0x2ea2ce37, 0xffffffffffffff81, 0xd10, 0x4, 0x0, 0x6, 0x982f115000000000, 0x10000, 0x7, 0x7d3, 0x3bb, 0x3, 0x40, 0x6, 0x8}}, 0xa0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_setup(0x4d97, &(0x7f0000000400)={0x0, 0x1136, 0x10, 0x1, 0x329, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000480)) syz_io_uring_complete(r7) syz_io_uring_complete(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:18:13 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="e8102a03af0ded94832db7c1555eae5dd02f48f78b7b0c33c18246d5ee2588b939da9c367279d7c838871bed3a10cb15413d6ecb550a2e5893be0ce09ac4a68f4c5fe9a14323640fd8dcf2cf0aae02797fff731b093704afd4c7a3d530de7bc02cee5d9e41417e07b6a4178765bf0e1d9fe416a6ea83b2dfcf0d79c5e74d241f7ff99a98d9f8741f468f27ae4b933f74bb7f12435662ceb177f96e24ada454aea272309c21bdaad3831b06864e973905d646a005d424ec51fb0983777325b24e2c6f6663fea47d092288c0984906769376850a6233674fc4f92c0cd4336940c6877029d53b66b296d481de821760da79e259c4ad32bab095fa7da2e37e7a003eadd53cafe05fcccb84016a7f3241fb1dbdf0", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) 12:18:13 executing program 7: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0xb1, 0x3, 0x6, 0x0, 0x3, 0x10100, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x60, 0x8, 0x0, 0xf, 0x100000001, 0x4, 0x5, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0x6, r3, 0x0) unshare(0x48020200) 12:18:13 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:13 executing program 6: semget$private(0x0, 0x4, 0x100) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x0, 0x1000}, {0x1, 0x7fff, 0x1000}, {0x6, 0x2, 0x800}, {0x3, 0xff00}, {0x4, 0x6468}, {0x0, 0x5, 0x1000}, {0x3, 0x4, 0x1800}, {0x3, 0x9, 0x1800}], 0x8, &(0x7f0000000040)) semop(r1, &(0x7f0000000400)=[{0x1, 0x7, 0x1000}], 0x1) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r3, r4, 0x100) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000380)=0xfdae) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, r8, 0x100) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010001000000000002000600", @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000600", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040006000000000008000000", @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="10000400000000002000070000000000"], 0x6c, 0x2) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 12:18:13 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) unshare(0x800) 12:18:13 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) [ 2467.749812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2467.778302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2467.805502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2467.825489] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2467.873522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=281 sclass=netlink_route_socket pid=29136 comm=syz-executor.0 [ 2467.925998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2467.927840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2467.929629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:18:13 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="ff0300000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f070c58e48c83e523120000000000000044ca80"]) r0 = inotify_init() preadv2(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/151, 0x97}], 0x5, 0x401, 0xff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:18:13 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000080)) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:18:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:18:13 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2468.251436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2468.289370] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2468.356429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 12:18:13 executing program 7: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fallocate(r1, 0x10, 0x8, 0xfffffffffffffffb) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = accept(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0xf1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000280)) [ 2468.357886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2468.360209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:18:13 executing program 6: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x3b}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000001780)={{0x2, 0x0, @remote}, {0x308}, 0xac1414fb, {0x2, 0x0, @broadcast}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r4, 0x7, 0x1) fallocate(r3, 0x1d, 0xfffffffffffffffe, 0xb35c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x64, &(0x7f0000000180)=0x46c4, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 2468.401145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2468.462626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:18:13 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2468.520660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:18:13 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2468.579556] kauditd_printk_skb: 30 callbacks suppressed [ 2468.579571] audit: type=1326 audit(1744719493.923:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d03651b19 code=0x7ffc0000 [ 2468.614902] audit: type=1326 audit(1744719493.959:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d03651b19 code=0x7ffc0000 [ 2468.621797] audit: type=1326 audit(1744719493.966:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d03651b19 code=0x7ffc0000 [ 2468.625619] audit: type=1326 audit(1744719493.966:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d03651b19 code=0x7ffc0000 [ 2468.641097] audit: type=1326 audit(1744719493.985:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7d03651b19 code=0x7ffc0000 [ 2468.645584] audit: type=1326 audit(1744719493.986:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f7d03651ad7 code=0x7ffc0000 [ 2468.665511] audit: type=1326 audit(1744719494.008:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7d03604ab7 code=0x7ffc0000 [ 2468.668821] audit: type=1326 audit(1744719494.011:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7d03604ab7 code=0x7ffc0000 [ 2468.674800] audit: type=1326 audit(1744719494.011:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7d03604ab7 code=0x7ffc0000 [ 2468.676752] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2468.681962] audit: type=1326 audit(1744719494.015:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29159 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f7d03604ab7 code=0x7ffc0000 [ 2468.702954] loop6: detected capacity change from 0 to 16776704 [ 2468.742874] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2468.776907] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2468.781159] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 2468.781159] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2468.781159] [ 2468.805098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.806772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2468.809528] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2468.826410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.828064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2468.829646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2468.841422] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,,errors=continue 12:18:30 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 12:18:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000751352ab49dae2fa05c52348212677cf7cb6d0b3f0f04d57436e546349e79b80db7ddc24866b3421b5af458e68083b76b2b0"]) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f00000001c0)=@sha1={0x1, "af24cad929297923ca19be938d320278d4b4943e"}, 0x15, 0x3) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup3(0xffffffffffffffff, r6, 0x0) unshare(0x48020200) 12:18:30 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$9p_unix(&(0x7f00000002c0)='./file1\x00', &(0x7f00000004c0)='./file1\x00', &(0x7f0000000940), 0x2021, &(0x7f0000000980)={'trans=unix,', {[{@privport}, {@version_L}, {@version_L}], [{@permit_directio}]}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file2\x00', 0x200, 0x109) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0xa000, 0x40) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x8, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap}], [{@smackfstransmute}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@smackfshat}, {@smackfsfloor={'smackfsfloor', 0x3d, '-@\x00'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@audit}]}}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file2\x00', 0x0, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r1, r2, 0x100) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x14821, &(0x7f0000000a00)={'trans=unix,', {[{@version_u}, {@debug={'debug', 0x3d, 0x3}}, {@version_9p2000}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@measure}]}}) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000180)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x8000000) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x2) 12:18:30 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) 12:18:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 1) 12:18:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:18:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) dup(r2) r3 = syz_io_uring_complete(r1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='logfs\x00', 0x2800000, &(0x7f00000002c0)='\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{r4, 0x3a, 0x400, 0x10001, 0x5, 0x80000001, 0x0, 0x1000, 0x80000000, 0x7, 0x7, 0x9, 0x45f61ead, 0x3, 0x14}}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x30000804}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="040029bd70b3ff2110d14319a51ca1000500020100f67711316a"], 0x20}}, 0x8040) [ 2485.157595] loop6: detected capacity change from 0 to 262144 [ 2485.194629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.206797] FAULT_INJECTION: forcing a failure. [ 2485.206797] name failslab, interval 1, probability 0, space 0, times 0 [ 2485.210065] CPU: 1 PID: 29196 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2485.211627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2485.213779] Call Trace: [ 2485.214389] dump_stack+0x107/0x167 [ 2485.215214] should_fail.cold+0x5/0xa [ 2485.216187] ? sock_alloc_inode+0x18/0x1c0 [ 2485.217174] should_failslab+0x5/0x20 [ 2485.218102] kmem_cache_alloc+0x5b/0x310 [ 2485.219220] ? selinux_ipv6_output+0x180/0x180 [ 2485.220239] ? sock_free_inode+0x20/0x20 [ 2485.221154] sock_alloc_inode+0x18/0x1c0 [ 2485.222062] ? sock_free_inode+0x20/0x20 [ 2485.222980] alloc_inode+0x63/0x240 [ 2485.223790] new_inode_pseudo+0x14/0xe0 [ 2485.224676] sock_alloc+0x3c/0x270 [ 2485.225480] __sock_create+0xbd/0x7f0 [ 2485.226314] ? wait_for_completion_io+0x270/0x270 [ 2485.227410] __sys_socket+0xef/0x200 [ 2485.228261] ? fput_many+0x2f/0x1a0 [ 2485.229253] ? move_addr_to_kernel+0x70/0x70 [ 2485.230461] ? ksys_write+0x1a9/0x260 [ 2485.231398] ? __ia32_sys_read+0xb0/0xb0 [ 2485.232326] __x64_sys_socket+0x6f/0xb0 [ 2485.233334] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2485.234592] do_syscall_64+0x33/0x40 [ 2485.235587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2485.236781] RIP: 0033:0x7f89495f2197 [ 2485.237618] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2485.241999] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2485.243719] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2485.245366] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2485.247024] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2485.248687] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2485.250330] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 [ 2485.252458] socket: no more sockets [ 2485.275781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2485.288563] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.293991] 9pnet: Insufficient options for proto=fd [ 2485.297938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2485.320056] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2485.364224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2485.365847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2485.367596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2485.401421] 9pnet: Insufficient options for proto=fd 12:18:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x66ec, &(0x7f0000000980)={0x0, 0xd48c, 0x0, 0x3, 0xe}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000a00), &(0x7f0000000a40)) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f0000000940)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000080)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)="5d62d81662b20ee7778f213c3399f983c63834049c5a3955e81b097a9220c4176c6433e7b27099155e879f53082547d4105751f614f5241a589bc567e07304e00f847beb94a1bfacdae552ef4deaa9dc56e8db8101c4d039ed580276f180b35d2385f8bf74b2b1dacbc190f2f7ab610a61ff42fa7298a98a7e774b39309cdc0d82341b70aea20c1f6d5c63b26f705ae701934f51832734266a110db19aeff6b84b20f14d3f13b3b44a87fd71e4201762627f7cf2a621cfe74f6653a355c5e39cc7ca814beca59aff638d10cc0759cc544d3a0a59bdf158571d97fd9c5fd5274189941ff68b306ae6c54a3abeb289a8", 0xef}, {&(0x7f0000000280)="d6fe0c9e3a923cbe161a6d88ffa3c822a2384bd9aa84897032e95c204e909409fcf60f6a63d4b139653bf444dcb74ddfe77d7f0c3e13983aedd8ff53f9e15c0e85d7c1196cdc1203633f71e094a0543901103e8ae3b1d47df3bda7af7e9f24d18821067d1198c5e53812b07ef203507773e9d0180886c7009abe3f9b027eb652528c609c046924d2521de8328b275d6bc2e0208af679ca386df0f8ba2d6da580812172c502fa282f10622527e6ef29a5bb018b2cafbf5c7e6597424af0e18a42be72786df91da97156a1408c6c158cef6500d5b10b9bb1cd5eca1233ae3c1044590a484bb9c50b3cd8d92ff5d4e5be", 0xef}, {&(0x7f0000000380)="caab11b9a0a84ef313fc0792f3c6982cd9f63530043e3d089d1fe1e92926ecf2d7ebbfffac63ff8cb067c1e178ed48544f17084171f463d723da64c7367b5fd103ac601910a995460209f72ac23632258e7b3080de6e98674a981dfaf8c3879f66739a46d4584865d439c8bae51929561941410b74c4c7e6073c9edc02fce7ebd315648828e7216cacaa01b83b857b10430a6ef0a1d17a2cde03b36ee2e93a04fdf9b162f0c3255b4330079b7fae62d6d644a44f14909f4e63fc9b3cf2206b16c23171dcdf7b1f5e4cce043dd80527bcc55c659d175ff55718f6a71367", 0xdd}, {&(0x7f0000000200)="252947c4de3a644d4da297ce14cee9d7997f3b8a12fd078f67ef4030702bb408ac546b26226eef474a89ddd6790d9a6304ff", 0x32}, {&(0x7f0000000480)="ad59e9e30ab453b3e414d7408caa7fb701af2229b5814468a5199313a6d20e6600065452930389acf93835f9e9176bce82c06b31ef2eb10240d51cc35b037db00d45f41c2a4a80bfe22cbd55f962f6cb192c4af0f3f1e1e9cfc2943da106d704ea73b5eed3dd91dd8852752fc4c5ca7ba7ad230655cd33e5fef3f75537e916c18d2216b089624e982302fa1c821e062b8fa97a80d8e50f7c68c1fb1e69d6c4665403973bd8d15bd581bfa160baf679cd074d46fde29cbf0d7b417193d4ca37c2188dcfdc3ed254b44beef7", 0xcb}, {&(0x7f0000000580)="2d9db11d34f31a745d66b90f62cf29926b9631584d80d8caf439d6af0a6290f806c280edff49955ce5b0f14d27ceaf4f945632d0146f3079067b350f258fb4be2efa30459c33d3eb3e9572578c4539a954f10ea2f0ae95ca0e33cda6ee441f4184dcc5cb188700cf13cd06038081b3af22a8a75cf06106d5edfae21da0c8d414a326ff0158f024bc3d47570f06b48a2966340922c96ad2dc1a07d6c1997ffca1b23a0377231cafb5557e26dca28d380537bedf7fd0fe6b1d03ae45d0f6a3b650fabf57d4241fa7b32485ca4891754d03fc74c3f6f4139ed3ddd30407286fb8afaa1d", 0xe2}], 0x6, &(0x7f0000000700)=[{0x50, 0x10e, 0xfffffbff, "94ee54839bbf9ebcf5661587f85df21ee3843a7adef70ed92f5b310243be84fe18defc38a6885747a0be0c5b818b832fbc8c9b7d877449a39cad864e07"}, {0x30, 0x6, 0x80000001, "070f58408b2f0f75901de3736e510ba3f2d481f551d58def885d92da"}, {0x98, 0x29, 0x1, "8e565cf0924563dedc1da53f6d80a95481e4543207c831403f820fb0d5edd9d19198eea6793edc4efb9445229f9950df517fe8e562a57770225b2f4f925f0ae067e32b4b7eec1645bf2069d540520b08b24058c9b72038614fb75bd68ba5a3d4b97f4ab0c02d1c1f4383629352a6340107044bf14f6a277207b2889e8ad843cf16a10de7e7047fbd"}, {0xc0, 0x107, 0x7fffffff, "ae96703ec774079da86d4112ebb8f5a951cfa49dafecbc4c700e1f8041fa34c3dc2d8f32db2a78b42049e913a7925fd51db605c0089bdc763245f1d83253c8744ee249ca623e0e404480ad13e4a8cc3499a4dfca488e9be423774d479d456d5bb6c7239df99bc7a26422ef86ab237b7707384d0cd1f974a748f994b9e6a3dcc85c3a9db58c2707cf65876cd56fe39ec764ade2328ca9dd5f25812f0362ad5dd6f34458840ab9d5d75dc7"}], 0x1d8}, 0x0, 0x800}, 0x7f) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:18:30 executing program 6: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0/../file0', [{0x20, 'journal_checksum'}, {0x20, 'journal_checksum'}, {0x20, 'ext2\x00'}, {0x20, 'ext2\x00'}, {}, {}, {}], 0xa, "a33f23c5dfc0c28c8779dd206a6248708515e465c1791271da39d97670a9116910d77c12ea07e2a0884554e7086f261fe80303fa552b05e54f6a42cc3159cce78a68efe4508b2506b098147c079214c093f6a819319585e2f4ab3b4ccf5fbe841e11388f59bae79ac1f1e135caa82f3f26065f89ee3faaf89f0eb0a793b4547e3085f92a452f45572bd3cdb06350acf637e1bb9a7bebb4f2cea401b4c5358b4bd18fbc911f6ff0803433fad08eb8a57c248131aabff30fd9fd828ebe59482d9b9806b477ee540ec2e46d0caf7c6d9105"}, 0x115) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x4047e, &(0x7f00000000c0)={[{@journal_checksum}]}) 12:18:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100010001000800180000002322de2b8049a334bebcd312231dfa5d07eb98aaf3209daf38cff440788a88fc845f69a1978501859254a5089e45f8000000003020567027f69d69d056f1", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2485.551458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.609468] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2485.643013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2485.644652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2485.646537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:18:44 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 2) 12:18:44 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) 12:18:44 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:18:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:18:44 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f00000000c0)=""/199, &(0x7f00000001c0)=0xc7) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000040)) openat(r5, &(0x7f0000000200)='./file0\x00', 0x408600, 0xc8) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:18:44 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$sock_proto_private(r1, 0x89e4, &(0x7f00000001c0)="569cdf89dc10afb12e6fd6dee5961017a915a86564b1bfd1165ef6531321a6b1bb0c5402e573ac8b1e8a39c73dd4f27d35d57a3ac3d99297f67a8ac9bc8d06b562afd935a83faeaf8271929cfe90c4f2df71103aa6668d115ae8574b4bbb8c8013c6449cf81dcac252f3f1222c6ad54176d25a071264247c4e7260bb056a5337b41d1400b1131e7499ca57add4b2cbcd93d178259d8cf3720ff95367fd46d459997c6b04097cee07df78d063055b56008fda3609e7bbe851b639d084a1afc519c7e49dbcb3791e3a11") unshare(0x48020200) 12:18:44 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) sendfile(r1, r6, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) [ 2499.487822] FAULT_INJECTION: forcing a failure. [ 2499.487822] name failslab, interval 1, probability 0, space 0, times 0 [ 2499.491534] CPU: 0 PID: 29245 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2499.493183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2499.495026] Call Trace: [ 2499.495679] dump_stack+0x107/0x167 [ 2499.496657] should_fail.cold+0x5/0xa [ 2499.497523] ? create_object.isra.0+0x3a/0xa20 [ 2499.498562] should_failslab+0x5/0x20 [ 2499.499430] kmem_cache_alloc+0x5b/0x310 [ 2499.500371] create_object.isra.0+0x3a/0xa20 [ 2499.501406] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2499.502560] kmem_cache_alloc+0x159/0x310 [ 2499.503516] ? sock_free_inode+0x20/0x20 [ 2499.504452] sock_alloc_inode+0x18/0x1c0 [ 2499.505376] ? sock_free_inode+0x20/0x20 [ 2499.506305] alloc_inode+0x63/0x240 [ 2499.507230] new_inode_pseudo+0x14/0xe0 [ 2499.508291] sock_alloc+0x3c/0x270 [ 2499.509214] __sock_create+0xbd/0x7f0 [ 2499.510127] ? wait_for_completion_io+0x270/0x270 [ 2499.511258] __sys_socket+0xef/0x200 [ 2499.512079] ? fput_many+0x2f/0x1a0 [ 2499.512935] ? move_addr_to_kernel+0x70/0x70 [ 2499.513961] ? ksys_write+0x1a9/0x260 [ 2499.514864] ? __ia32_sys_read+0xb0/0xb0 [ 2499.515836] __x64_sys_socket+0x6f/0xb0 [ 2499.516800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2499.518030] do_syscall_64+0x33/0x40 [ 2499.519049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2499.520445] RIP: 0033:0x7f89495f2197 [ 2499.521473] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2499.525859] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2499.527668] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2499.529342] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2499.531064] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2499.532749] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2499.534463] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 [ 2499.563341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2499.574071] loop6: detected capacity change from 0 to 135266304 [ 2499.577038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2499.582177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2499.641472] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:18:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x191100, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r7, &(0x7f0000000180)='./file0\x00', 0xc1) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000140)={0x2018}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2499.727076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2499.757945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2499.759503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2499.761305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:18:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) sendfile(r1, r6, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) 12:18:45 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100"/108], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:18:45 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x34, 0x20, 0x70bd2a, 0x25dfdbfd, {0xa}, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4050) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x77, 0x3, 0x5, "67c541745d698f7397fba0ef31ebc876", "e56271b637d53d7e9b9a770402cf878fcefc8623ce632d8a13a09185b0f80b6723346b9bbadf84bed5051353b58d8edd81df81ea7a5df311ef3ad504cd112135628a70f0a6226979b3db79fed7f4924d915b0a4a1ec2b3c2b3303dc4aa4a27fddd1b"}, 0x77, 0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, r4) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000380), 0x51f001, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file0\x00'}) [ 2499.905969] loop0: detected capacity change from 0 to 135266304 [ 2499.924099] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value 12:18:45 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 3) [ 2499.992942] loop0: detected capacity change from 0 to 135266304 [ 2499.995584] loop6: detected capacity change from 0 to 135266304 [ 2500.005557] FAT-fs (loop0): Unrecognized mount option "./file0" or missing value [ 2500.051913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2500.145883] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2500.220850] FAULT_INJECTION: forcing a failure. [ 2500.220850] name failslab, interval 1, probability 0, space 0, times 0 [ 2500.223388] CPU: 0 PID: 29280 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2500.224936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2500.226713] Call Trace: [ 2500.227280] dump_stack+0x107/0x167 [ 2500.228059] should_fail.cold+0x5/0xa [ 2500.228892] ? security_inode_alloc+0x34/0x160 [ 2500.229886] should_failslab+0x5/0x20 [ 2500.230703] kmem_cache_alloc+0x5b/0x310 [ 2500.231578] security_inode_alloc+0x34/0x160 [ 2500.232529] inode_init_always+0xa4e/0xd10 [ 2500.233447] alloc_inode+0x84/0x240 [ 2500.234218] new_inode_pseudo+0x14/0xe0 [ 2500.235050] sock_alloc+0x3c/0x270 [ 2500.235808] __sock_create+0xbd/0x7f0 [ 2500.236612] ? wait_for_completion_io+0x270/0x270 [ 2500.237640] __sys_socket+0xef/0x200 [ 2500.238410] ? fput_many+0x2f/0x1a0 [ 2500.239170] ? move_addr_to_kernel+0x70/0x70 [ 2500.240093] ? ksys_write+0x1a9/0x260 [ 2500.240906] ? __ia32_sys_read+0xb0/0xb0 [ 2500.241759] __x64_sys_socket+0x6f/0xb0 [ 2500.242597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2500.243669] do_syscall_64+0x33/0x40 [ 2500.244512] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2500.245779] RIP: 0033:0x7f89495f2197 [ 2500.246698] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2500.250795] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2500.252430] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2500.253946] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2500.255430] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2500.256954] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2500.258444] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 [ 2500.260404] socket: no more sockets [ 2500.295740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2500.297552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2500.299222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2505.304355] Bluetooth: hci1: command 0x0409 tx timeout [ 2507.352265] Bluetooth: hci1: command 0x041b tx timeout [ 2509.401244] Bluetooth: hci1: command 0x040f tx timeout [ 2510.104271] Bluetooth: hci4: command 0x0406 tx timeout [ 2510.693175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2510.696051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.700025] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2510.770113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2510.772314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2510.775520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2510.918154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2510.928511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.448248] Bluetooth: hci1: command 0x0419 tx timeout 12:19:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:13 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:19:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 4) 12:19:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="28fdceda60aac1b7020000a00000000000"]) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:19:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) sendfile(r1, r6, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) 12:19:13 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1f, 0x1a, 0x21, 0x45, 0x0, 0x6, 0x80, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0x43bed8606bc7b13d, 0x3, 0x80000001, 0x3, 0xff, 0x9, 0x4, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0xa, r3, 0x3) 12:19:13 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100"/108], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:19:13 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000000000000042b680b7ec8ad20bc9b0888558a65eac4733a2b015e79b836c3d9f2ccc80cb5f0000709a75762d79ffdbf22a48e01f"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffa3c6b3f}, 0x10000, 0x0, 0x23, 0x0, 0x8, 0xffeffffc}, 0x0, 0xb, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) ioctl$CDROMREADALL(r2, 0x5318, &(0x7f0000001000)) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) bind$unix(r2, &(0x7f00000001c0)=@abs={0x61417238a084610e, 0x0, 0x4e23}, 0x6e) recvmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000001a80)=""/184, 0xb8}], 0x3, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000480)=""/32, 0x20}, {&(0x7f0000001c40)=""/162, 0xa2}], 0x2}}, {{&(0x7f0000001e00), 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001e80)=""/217, 0xd9}], 0x1, &(0x7f0000001f80)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002000)=@abs, 0x6e, &(0x7f0000002080)}}], 0x4, 0x0, &(0x7f00000021c0)={0x0, 0x989680}) [ 2528.176759] loop6: detected capacity change from 0 to 135266304 [ 2528.186974] FAULT_INJECTION: forcing a failure. [ 2528.186974] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.190005] CPU: 0 PID: 29756 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2528.191523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.193259] Call Trace: [ 2528.193821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2528.193845] dump_stack+0x107/0x167 [ 2528.193873] should_fail.cold+0x5/0xa [ 2528.197207] ? create_object.isra.0+0x3a/0xa20 [ 2528.198167] should_failslab+0x5/0x20 [ 2528.198961] kmem_cache_alloc+0x5b/0x310 [ 2528.199817] create_object.isra.0+0x3a/0xa20 [ 2528.200734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.201803] kmem_cache_alloc+0x159/0x310 [ 2528.202682] security_inode_alloc+0x34/0x160 [ 2528.203601] inode_init_always+0xa4e/0xd10 [ 2528.204491] alloc_inode+0x84/0x240 [ 2528.205261] new_inode_pseudo+0x14/0xe0 [ 2528.206096] sock_alloc+0x3c/0x270 [ 2528.206838] __sock_create+0xbd/0x7f0 [ 2528.207628] ? wait_for_completion_io+0x270/0x270 [ 2528.208647] __sys_socket+0xef/0x200 [ 2528.209427] ? fput_many+0x2f/0x1a0 [ 2528.210188] ? move_addr_to_kernel+0x70/0x70 [ 2528.211103] ? ksys_write+0x1a9/0x260 [ 2528.211897] ? __ia32_sys_read+0xb0/0xb0 [ 2528.212785] __x64_sys_socket+0x6f/0xb0 [ 2528.213621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.214698] do_syscall_64+0x33/0x40 [ 2528.215482] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.216561] RIP: 0033:0x7f89495f2197 [ 2528.217421] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.219014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2528.221294] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2528.221314] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2528.221325] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2528.221336] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.221358] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2528.230770] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 [ 2528.245007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2528.272499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2528.280421] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2528.358047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2528.359674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2528.361947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:19:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) fallocate(r3, 0x8, 0x7f, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r5, r4, &(0x7f0000000080)=0x100000000, 0x401) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:19:13 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100"/108], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:19:13 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) sendfile(r1, r6, 0x0, 0x100000001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x401c5820, &(0x7f00000000c0)={0x8}) [ 2528.563969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:13 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 5) 12:19:13 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="001ec2026fd3dfdcaf81249c85b80000000000000000000000dba1ed534dc3052d9f354770c33a85fff4ad79cde298d275a7ef9bb21c79f9bc387454cd9cf89278383d00"/83, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2528.635900] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2528.659699] loop6: detected capacity change from 0 to 135266304 [ 2528.681937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2528.683744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2528.685603] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:19:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2528.743884] FAULT_INJECTION: forcing a failure. [ 2528.743884] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.746529] CPU: 1 PID: 29788 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2528.748253] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.750091] Call Trace: [ 2528.750654] dump_stack+0x107/0x167 [ 2528.751429] should_fail.cold+0x5/0xa [ 2528.752234] ? sk_prot_alloc+0x11d/0x2c0 [ 2528.753106] should_failslab+0x5/0x20 [ 2528.754075] __kmalloc+0x72/0x390 [ 2528.754919] sk_prot_alloc+0x11d/0x2c0 [ 2528.755921] sk_alloc+0x30/0x350 [ 2528.756644] __netlink_create+0x63/0x340 [ 2528.757518] netlink_create+0x3b2/0x5e0 [ 2528.758364] ? genl_start+0x670/0x670 [ 2528.759175] __sock_create+0x358/0x7f0 [ 2528.760010] __sys_socket+0xef/0x200 [ 2528.760806] ? fput_many+0x2f/0x1a0 [ 2528.761584] ? move_addr_to_kernel+0x70/0x70 [ 2528.762645] ? ksys_write+0x1a9/0x260 [ 2528.763487] ? __ia32_sys_read+0xb0/0xb0 [ 2528.764508] __x64_sys_socket+0x6f/0xb0 [ 2528.765538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.766751] do_syscall_64+0x33/0x40 [ 2528.767545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.768627] RIP: 0033:0x7f89495f2197 [ 2528.769438] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.773917] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2528.775560] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2528.777083] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2528.778609] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 12:19:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000004c0)='./file0/file0\x00', 0x80, 0x8, &(0x7f00000018c0)=[{&(0x7f0000000500)="435b8b058262e7335a00ff8c4b44cf765731bbd10374042a20623bc96b5735574b6b216f892034503fa227213be1389efbd8b983e3e24765e22efb079f1d7b8653d628fbdc8a4a520da60d9bfff0f6ade703637fe4e578ba922cb38d608d8b36ebd73d4340c30c5b65ebaa78c43c06f0ccb32f975239088abbe12ec8393c9efddf0e60787b443c1241f42c320268a6fd1bfb059639ffe3865a2d8b02e2024035f74804a2891359293537e2329687ef287f536f24752501b341a0ac25c6b0161df94e10b3ddf1d9", 0xc7, 0x1}, {&(0x7f0000000600)="2ae498ec113a0bb269a1535c3d11967904c685b7f84c88941aa8d60a6353bc4489b102550531718f684d44334d43778c8007bfbbae4633bbf5d301fcba04ff087e013e319f5e1453a57c843ab4dbf67c06d43d9911e14963e2c25d84", 0x5c, 0x80000001}, {&(0x7f0000000680)="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", 0x1000, 0x8}, {&(0x7f0000001680)="4c365f7a3a8577f1eb40171250ceea1fdace49f84a40df3ec82f40ad7012cf5ff39b289cf0ae9d868acd7c15f0f2", 0x2e, 0x1}, {&(0x7f00000016c0)="72f8ab9874908f17d9d024d5c92f2fce7f70ee324f40ca813905aefd15c0bbca5bbf43fad544902066d6d61e0833e1499b2b8c807cb5a46c7a", 0x39, 0x1}, {&(0x7f0000001700)="6ac90df972bd75af99bf019f38ddda5a967ae097aaec10eabb894c2df83c75f2db80953c32bd9846edc302eec603cc1e4c55f56c5212629b62b1f43ee2da5c10b5770dc9549f2cb29c3953387aea8e459fdfe65abb1f490e5a441f2aadb1eb0fc2000bbb104cba79a2431836d202b2f664b6d09196f250500e0397102cd519f408d8f5b6", 0x84, 0xfffffffffffffff8}, {&(0x7f00000017c0)="1352c39af920b6ac5ef08f029c045137be5c3c979207c7228dd68d5b257b120d9633a8ac5699e45ecbf60a441a1164bd62fd833b962904c1eb6d0a2e4ff03497142f29ce58af98c97282a60d9c4deae21037d71d79c01860c2238df54c01509029a713ecc66b75b7a1d06ccd0f8f2c5d41a9b53e98922aa3ab1f55209929ea172c83dc1ad942dc99681ff59fed8229ac32b9292e70d11d3eb24d6f3e42c2f068908411be3d1a", 0xa6, 0x5}, {&(0x7f0000001880)="6d4bdc549013f936b7e04fe1dff4626c13814d8e5dd392d688a0d4ec3e3606e6a4", 0x21, 0x7270}], 0x100404, &(0x7f0000001980)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@rodir}], [{@appraise_type}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r8 = open(&(0x7f0000000200)='./file0/file0\x00', 0x10000, 0x100) r9 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r9}, &(0x7f0000000040)=0x0) sendmsg$nl_generic(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x204, 0x36, 0x10, 0x70bd26, 0x25dfdbfd, {0x1f}, [@typed={0x8, 0x63, 0x0, 0x0, @fd=r8}, @nested={0x1e8, 0x4f, 0x0, 0x1, [@generic="0410aee38b17e4ef014c778bfc94484077c7f647d57e4bb8d4c682a64ea19b13bbba259b5747ef9aa985530b5df765d27f10d3e5999ff762ed1bd9552e9a22013c3dce32122b309ef990dbbed1368d0cbc8ee55722", @generic="7fa8ab5e016250a69b253930b7092ccb03a86061630070cab52b82b8efd209841c428e3ac4100e745e2f0cbd97dd28212ac513f82f53b2fabf0b3e179bf5fbed4247fc228c6cbb3a0aa7821c5b38a2a03f171ad768e4fc0f8fe25ad2adbfa725b24aa4f0d827d715a7bac00295", @generic="21186fc52b9743b4889d95c0618d969f572611be66bcdded81ffa24110b703380d32d6f8d058d3fa9c724a3c650103c96768ae0a02a90cf31492081cb011b75fa9e5c2bb3a91beb5f3d0f5066958be420cbce1", @generic="15a43952e720f3d3a9859a242d69d5bdebe84f82414c", @typed={0x8, 0x34, 0x0, 0x0, @pid=r9}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x3ff}, @typed={0x4c, 0x30, 0x0, 0x0, @binary="bc92a59f7501693f3330b139679612121575f8402e3e5d9b0f91819e06c74daf4220317df0a1888eae8f7cc0182092ccb05a71e923f5c0ac525289b0cf51fe056f770bf9fd59a54e"}, @generic="f4d96927a9e3a447dfce75865d9e6d0932ca96511fb6ae76e0babaee3c29a0f1fa53f0d25cf5585f7a87f6360cb42be1303a8f4a4c16996c539b1385a7482479dd6c4b8f91ad949d3426e0b386ae178ab1", @typed={0x8, 0x2c, 0x0, 0x0, @pid}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x58880}, 0x4000081) timer_gettime(r10, &(0x7f00000001c0)) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2528.780432] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2528.782301] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 12:19:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2528.899506] loop0: detected capacity change from 0 to 135266304 [ 2528.919613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2528.966698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:19:14 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) sendfile(r1, r6, 0x0, 0x100000001) [ 2529.032116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:14 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:19:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pipe(&(0x7f0000000100)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x2, 0x2, 0x80, 0x0, 0x800, 0xc070, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x7fffffff, 0x2}, 0x208c, 0x9e, 0x4, 0x5, 0x0, 0x0, 0x4786, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r3, 0x8) 12:19:14 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r4, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) [ 2529.117174] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2529.163485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2529.165007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2529.166668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:19:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 6) [ 2529.205924] loop6: detected capacity change from 0 to 135266304 [ 2529.289425] FAULT_INJECTION: forcing a failure. [ 2529.289425] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.291871] CPU: 1 PID: 29821 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2529.293345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.295119] Call Trace: [ 2529.295690] dump_stack+0x107/0x167 [ 2529.296481] should_fail.cold+0x5/0xa [ 2529.297305] ? create_object.isra.0+0x3a/0xa20 [ 2529.298281] should_failslab+0x5/0x20 [ 2529.299091] kmem_cache_alloc+0x5b/0x310 [ 2529.299960] create_object.isra.0+0x3a/0xa20 [ 2529.300906] __kmalloc+0x16e/0x390 [ 2529.301668] sk_prot_alloc+0x11d/0x2c0 [ 2529.302497] sk_alloc+0x30/0x350 [ 2529.303242] __netlink_create+0x63/0x340 [ 2529.304233] netlink_create+0x3b2/0x5e0 [ 2529.305091] ? genl_start+0x670/0x670 [ 2529.305993] __sock_create+0x358/0x7f0 [ 2529.306826] __sys_socket+0xef/0x200 [ 2529.307611] ? fput_many+0x2f/0x1a0 [ 2529.308384] ? move_addr_to_kernel+0x70/0x70 [ 2529.309325] ? ksys_write+0x1a9/0x260 [ 2529.310131] ? __ia32_sys_read+0xb0/0xb0 [ 2529.311056] __x64_sys_socket+0x6f/0xb0 [ 2529.311906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2529.313007] do_syscall_64+0x33/0x40 [ 2529.313803] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2529.314902] RIP: 0033:0x7f89495f2197 [ 2529.315697] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.319612] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2529.321238] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2529.322748] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2529.324261] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.325787] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2529.327302] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 12:19:14 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:19:14 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2529.382111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:19:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) openat(r1, &(0x7f0000000080)='./file0\x00', 0x20102, 0x10) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, r4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2529.533787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2529.658449] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2529.672748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2529.720958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2529.766101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2529.767936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2529.770367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2534.680277] Bluetooth: hci7: command 0x0406 tx timeout 12:19:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 7) 12:19:29 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) r1 = openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x4000, 0x194}, 0x18) connect$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x5}, 0x17218, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:19:29 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x4}, 0x1b9, 0x0, 0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f0000001000)="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", 0x112, 0x0, &(0x7f0000001140)={0x2, 0x95, {0x1, 0xc, 0x36, "0bdba6c323e45e5c295198690667cc530a8adeda7ede62e1184a647a604af9dc1076358b593a26a850eeb54f7d90c67eff42e7a3c8e8", 0x52, "78da665019cb0594cf42a4937fcfeb9c0dbbe6f0addbfe605fb46e0b09ad31c888528e2df9d4800d12df57d27282b51e080bccdfa56ba625457593aaf8a2d3174759292f28f9e124706a6cc9fc53abf83214"}, 0x7a, "f35223f2d309e2f49d2cb7545115f6e471d7eff25f77938f978d806a7b42e5669f0d54bf8b537dac40e1b621c3603ab906bcecf78df9f7cdab35719ad74277937d29b449e8502b193ca2d0df783f64b17e009f18b2e7ac74df05d211b85789b25942d25f0c8e4800a7c22ffc28571beec94e90b9f1dbf164b54c"}, 0x11b}) 12:19:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:19:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:19:29 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:19:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000008c0)={r5, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000300)={{r3}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r5}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r0, r1) 12:19:29 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2544.455428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2544.456859] loop6: detected capacity change from 0 to 135266304 12:19:29 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:19:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{r1}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r3}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) [ 2544.507036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2544.507631] FAULT_INJECTION: forcing a failure. [ 2544.507631] name failslab, interval 1, probability 0, space 0, times 0 [ 2544.511236] CPU: 1 PID: 29855 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2544.512700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2544.514466] Call Trace: [ 2544.515029] dump_stack+0x107/0x167 [ 2544.515799] should_fail.cold+0x5/0xa [ 2544.516609] ? selinux_sk_alloc_security+0x8b/0x1b0 [ 2544.517674] should_failslab+0x5/0x20 [ 2544.518480] kmem_cache_alloc_trace+0x55/0x320 [ 2544.519451] selinux_sk_alloc_security+0x8b/0x1b0 [ 2544.520474] security_sk_alloc+0x56/0xb0 [ 2544.521350] sk_prot_alloc+0x137/0x2c0 [ 2544.522173] sk_alloc+0x30/0x350 [ 2544.522894] __netlink_create+0x63/0x340 [ 2544.523756] netlink_create+0x3b2/0x5e0 [ 2544.524600] ? genl_start+0x670/0x670 [ 2544.525419] __sock_create+0x358/0x7f0 [ 2544.526245] __sys_socket+0xef/0x200 [ 2544.527037] ? fput_many+0x2f/0x1a0 [ 2544.527808] ? move_addr_to_kernel+0x70/0x70 [ 2544.528737] ? ksys_write+0x1a9/0x260 [ 2544.529551] ? __ia32_sys_read+0xb0/0xb0 [ 2544.530422] __x64_sys_socket+0x6f/0xb0 [ 2544.531262] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2544.532348] do_syscall_64+0x33/0x40 [ 2544.533144] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2544.534227] RIP: 0033:0x7f89495f2197 [ 2544.535017] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2544.538930] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2544.540544] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2544.542080] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2544.543599] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2544.545129] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2544.546666] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 [ 2544.556731] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:29 executing program 0: r0 = eventfd(0xa3) flock(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r2 = io_uring_setup(0x6234, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x3, 0x1ed, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r1, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 2544.643985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2544.645563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2544.647444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:19:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:19:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2544.816907] loop6: detected capacity change from 0 to 135266304 12:19:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xee00, 0x0, 0x1000) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x4001, 0x2e) fcntl$dupfd(r2, 0x0, r1) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x2e, 0x3, 0x400000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000b80)={0x4, 0xce7}) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000280)='./file1/file0\x00', 0x2) fcntl$getown(r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000018c0)={{0x1, 0x1, 0x18, r3, {0x80000001}}, './file0\x00'}) pwrite64(r5, &(0x7f0000001900)="3306c314f4f8eccd7a9510f05b02b02ba081a7a4a84e56935abf0cf139ff3215a0cb0502568930acdb353ed7d3f229de0e0bd181c7baed4092226a865c518dee6a3904a450d6d38f42afe4a57e34df9746566b83b223f1056828140a13adf120423b3e9337d9e4be021884cae61709f7db19be6ca78f", 0x76, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000140000f62826706ed72d7ce18fe400fedc2040d24b0c8f952c15b4239ed10c3bd22ecad71d46c6d29c47d6f837fdf4b0633aacf66aaa7200000000000000000000000000a15db44b3cd1f6b9a4c5beeaa433eb5f20165c4126f22db5f29e505cf0c9fb6b9fa26b3bc82663274223e882c3065acf3f39dddb9ae02278bf57c45e132803a03f62ce08ca3547f8fd3c0a661f83a35434189c84"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) 12:19:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 8) [ 2544.891610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000300)={{r1}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000100)={0x1, 0x8, 0x4, 0x0, {0x8, 0x7fff, 0x8, 0x4, 0x1ad1}, [0x5, 0x100000001, 0x80000000, 0x8, 0x7, 0x1, 0x0, 0xfffffffffffffffe]}}, @devid=r3}) [ 2544.959666] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2545.006669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2545.008264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2545.010029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2545.046887] FAULT_INJECTION: forcing a failure. [ 2545.046887] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.049584] CPU: 1 PID: 29888 Comm: syz-executor.7 Not tainted 5.10.236 #1 [ 2545.051042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.052802] Call Trace: [ 2545.053374] dump_stack+0x107/0x167 [ 2545.054150] should_fail.cold+0x5/0xa [ 2545.054961] ? create_object.isra.0+0x3a/0xa20 [ 2545.055929] should_failslab+0x5/0x20 [ 2545.056733] kmem_cache_alloc+0x5b/0x310 [ 2545.057607] create_object.isra.0+0x3a/0xa20 [ 2545.058532] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2545.059622] kmem_cache_alloc_trace+0x151/0x320 [ 2545.060618] selinux_sk_alloc_security+0x8b/0x1b0 [ 2545.061665] security_sk_alloc+0x56/0xb0 [ 2545.062531] sk_prot_alloc+0x137/0x2c0 [ 2545.063363] sk_alloc+0x30/0x350 [ 2545.064086] __netlink_create+0x63/0x340 [ 2545.064971] netlink_create+0x3b2/0x5e0 [ 2545.065816] ? genl_start+0x670/0x670 [ 2545.066624] __sock_create+0x358/0x7f0 [ 2545.067455] __sys_socket+0xef/0x200 [ 2545.068246] ? fput_many+0x2f/0x1a0 [ 2545.069029] ? move_addr_to_kernel+0x70/0x70 [ 2545.069973] ? ksys_write+0x1a9/0x260 [ 2545.070779] ? __ia32_sys_read+0xb0/0xb0 [ 2545.071652] __x64_sys_socket+0x6f/0xb0 [ 2545.072496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2545.073612] do_syscall_64+0x33/0x40 [ 2545.074392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2545.075484] RIP: 0033:0x7f89495f2197 [ 2545.076264] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.080148] RSP: 002b:00007f8946b650c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 2545.081756] RAX: ffffffffffffffda RBX: 00007f8949703f60 RCX: 00007f89495f2197 [ 2545.083246] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 2545.084750] RBP: 00007f8946b661d0 R08: 0000000000000000 R09: 0000000000000000 [ 2545.086268] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 2545.087769] R13: 0000000000000036 R14: 0000000020000300 R15: 0000000000022000 12:19:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:19:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001000000b7000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2545.153211] loop6: detected capacity change from 0 to 135266304 [ 2545.230123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2545.276135] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:19:30 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 2545.318542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2545.342994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2545.344556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2545.348663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2549.976281] Bluetooth: hci1: command 0x0409 tx timeout [ 2552.024305] Bluetooth: hci1: command 0x041b tx timeout [ 2554.072283] Bluetooth: hci1: command 0x040f tx timeout [ 2555.269011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2555.270921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2555.274742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2555.338341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2555.340119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2555.342761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2555.527625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2555.543133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2556.175086] Bluetooth: hci1: command 0x0419 tx timeout 12:20:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:20:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:20:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) syz_io_uring_setup(0x3e1, &(0x7f0000000080)={0x0, 0x2bed, 0x0, 0x3, 0x29d, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x9) 12:20:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x80000001}) 12:20:07 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000000000000942cad1834e9073889ec3d5d1e00cbdbac37499015dd4bd930131ea81e4dcee5448fbc374423b32e8129db1b94e81313918f3d25c01542ce2fdb8c8fd04208b18b6684fad0159d2461f30bdc9b4987"]) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x8) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROM_LOCKDOOR(r6, 0x5329, 0x1) unshare(0x48020200) 12:20:07 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c"], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:20:07 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:07 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2581.809806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2581.850525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2581.900539] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2581.900624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2581.907514] loop6: detected capacity change from 0 to 135266304 [ 2581.960742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2581.984016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2581.985647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2581.989033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) 12:20:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x40, 0x20, 0x8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pwrite64(r0, &(0x7f0000000080), 0x0, 0xc93) 12:20:07 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/203], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2582.316678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2582.367522] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2582.395225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2582.396732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2582.399570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:20:23 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:23 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:23 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f00000042c0), &(0x7f0000004300)={'fscrypt:', @desc4}, &(0x7f0000004340)={0x0, "3e700ef5d989eef23daa1835bd09f552800905ce1e320ed8cac3e312cd13f1e8aed9df80e54b69aa89cd2610109c361c71ba54959adda5a3619f7802b8fd8151"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x2, r0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)=@keyring) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="06c278498e3e096f2843ffd1c9b9fa77b934f72ee37080878b412091bf2be19afe1d0b77e4a661c46322d23d11ee0a4488b4b72bb8a4d9595441cfa0123fc1b48994a443da77ca54f983f0bfb0e91db2695d32004369c65d7c1492c5df71455e050424ace4f277ca10", 0x69, 0x8}], 0x810, &(0x7f0000000280)={[{@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@sysvgroups}, {}, {@data_err_abort}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '-&*('}}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4010, r4, 0x57b06000) 12:20:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct}}) 12:20:23 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000a511000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:20:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:20:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/203], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2598.231057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.253132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2598.260905] loop6: detected capacity change from 0 to 135266304 12:20:23 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2598.291782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.325723] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2598.332546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.358572] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 2598.412653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.414249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.418016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) syz_open_dev$sg(0x0, 0x0, 0x2001) 12:20:23 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/203], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:20:23 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r0, &(0x7f0000000280)=""/205, 0xcd, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:23 executing program 0: openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000280)={0x4, 0x4, 0x5, 0x7, 0xa, [{0x9, 0x0, 0x69739385, '\x00', 0x2}, {0x3, 0x0, 0x0, '\x00', 0x2000}, {0x3ff, 0xfffffffffffffffb, 0x374, '\x00', 0x2400}, {0x3410, 0x8, 0x7, '\x00', 0x1008}, {0x5, 0x0, 0x7, '\x00', 0x8}, {0x3, 0x6, 0x7, '\x00', 0x800}, {0x100, 0x6, 0x0, '\x00', 0x2101}, {0xfff, 0x1, 0x9, '\x00', 0x2901}, {0x4, 0x2f, 0x792ed678, '\x00', 0x2}, {0x0, 0x8001, 0x400, '\x00', 0x400}]}) 12:20:23 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2598.659470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2598.705500] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2598.789954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.805128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2598.806875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2598.808577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:38 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x9}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:20:38 executing program 4: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68001300", @ANYRES16=0x0, @ANYBLOB="08002c0000000009410000004c001800000007696200000000000000000000000000000000943129ade156e3cc0000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000099eae5e79f4"], 0x68}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000012) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r4 = fcntl$dupfd(r3, 0x0, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) accept$unix(r4, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e1e}, 0x6e) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:20:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:20:38 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r2, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) syz_open_dev$sg(0x0, 0x0, 0x2001) 12:20:38 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) creat(&(0x7f0000000080)='./file1\x00', 0x12a) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:20:38 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/210], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2613.059540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2613.061169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2613.070055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2613.084956] loop6: detected capacity change from 0 to 135266304 [ 2613.106466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2613.111597] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2613.149054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2613.150648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2613.154271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:38 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) [ 2613.360248] loop6: detected capacity change from 0 to 135266304 12:20:55 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/210], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:20:55 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\r/file0\x00']) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:20:55 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:20:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x50}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:20:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:20:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:20:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x40004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', r3, 0x4, 0x4, 0x40, 0xfffffffc, 0xf0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0xfffffff8, 0x1}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x52) syz_io_uring_complete(r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000001c0)={0x2a, 0x1a, 0x12, 0x8, 0x5, 0x401, 0x3, 0x4b}) 12:20:55 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x1f, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2629.782122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.799117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2629.800139] loop6: detected capacity change from 0 to 135266304 [ 2629.858631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.884617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.909556] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2629.966295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2629.967960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2629.969842] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:20:55 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/210], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:20:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x262400, 0x2) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/156, 0x9c, 0x4, 0xfffffff9}) write$binfmt_elf32(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x89, 0x1, 0x3f, 0x2, 0x3e, 0x5, 0x117, 0x38, 0x2f, 0x0, 0x0, 0x20, 0x2, 0x2, 0x9, 0x20}, [{0x4, 0x2, 0x3f, 0x1, 0x4, 0xffffffff, 0x48, 0xfff}], "047541439accaac8d48ffbdead8ded2e592a0e3ed52f3cd264a19b89fd393405cba36e9b67a26c4ba2307b7dbcaeb6fad9ede9a241a17b4cf58cb333db4ebdbaafa6a7023ce932d3cc86ea7be36effa85d5ffcf1629b4d74427be578c6ce177e71e571e5b623d948d74a146de9a1c4cba5e98b3ed5fab7bc00d1e18abbd1fe1a57563f1eec12f092", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6e0) [ 2630.154668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2630.176078] loop6: detected capacity change from 0 to 135266304 12:20:55 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0xc8010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x63cc, &(0x7f00000001c0)={0x0, 0xc74b, 0x20, 0x3, 0x2b}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x9) [ 2630.242563] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:20:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:20:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x58}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2630.316907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2630.318570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2630.320338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:20:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x13, r1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) getdents64(r7, &(0x7f0000000100)=""/72, 0x48) poll(&(0x7f0000000180)=[{r2, 0x4000}, {r1, 0x2000}], 0x2, 0x4) fcntl$dupfd(r6, 0x0, r5) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYRES32=r6, @ANYRESOCT=r5], 0xfdef) syz_io_uring_complete(r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2630.421982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.444742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:55 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/213], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2630.538674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2630.578758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2630.581964] loop6: detected capacity change from 0 to 135266304 12:20:56 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2630.691159] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2630.741565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2630.743473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2630.745482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:20:56 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r3, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:12 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2, 0x2}}, './file0\x00'}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r2, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:12 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:12 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/213], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:21:12 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x480, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000002c0)) ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="02000000000073d269d13ec1bf7601f6d1bb0000"]) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) finit_module(r1, &(0x7f0000000300)='\x00', 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) getsockname$unix(r3, &(0x7f00000001c0)=@abs, &(0x7f0000000100)=0x6e) unshare(0x48020200) 12:21:12 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x65}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:21:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000700)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000940)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000900)='./file0\x00', 0x10, 0x40080, 0x12345}, 0x1) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"7cc67991ac51af44e65e08be32d4c30a", 0x0, 0x0, {0x800, 0xa04}, {0x0, 0x1ff}, 0x400, [0x7f5, 0x1, 0x6, 0x6, 0x4, 0x1, 0x9, 0x3bf4000000000000, 0x7ade, 0x800, 0x8, 0x6b46, 0x2000000000000000, 0x3f, 0x800, 0x9]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2}, 0x0, 0xffdff7fdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = socket$netlink(0x10, 0x3, 0x0) clone3(&(0x7f0000000580)={0x200000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x35}, &(0x7f0000000480)=""/21, 0x15, &(0x7f00000004c0)=""/112, &(0x7f0000000540)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r7 = fcntl$dupfd(r6, 0x0, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) [ 2646.822644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2646.834153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.835605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.837364] loop6: detected capacity change from 0 to 135266304 [ 2646.853530] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2646.879654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2646.888682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2646.890297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2646.893137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:12 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/213], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2647.040890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.041394] loop6: detected capacity change from 0 to 135266304 [ 2647.074852] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.080393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2647.081445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2647.082345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xb103, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:21:12 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/215], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:12 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfd, 0x4, 0x8, 0x6, 0x0, 0x400, 0x802, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40b3, 0x4, @perf_config_ext={0x1abe000000000, 0x101}, 0x8220, 0x7, 0x1e402f1, 0x9, 0x8, 0x71b572d2, 0x3f, 0x0, 0x63, 0x0, 0x7}, 0x0, 0x7, r1, 0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:inetd_log_t:s0\x00', 0x21, 0x2) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:21:12 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:21:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2647.296081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.340550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2647.351078] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2647.405508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2647.406624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2647.407520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:29 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$unix(0x1, 0x5, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:29 executing program 0: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:21:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:21:29 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/215], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:29 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000001000)={0x0, 0x81, 0xf7, 0x3f, 0x4f, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./fi|e0\x00']) faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x8) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0xc) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_mtu}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000001c0)='wg2\x00', 0x4) 12:21:29 executing program 1: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:21:29 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2664.547577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2664.601460] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2664.632707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.639708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2664.666134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2664.667985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2664.671406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:30 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802c2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/215], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2664.750844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x13b) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x4) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x220a01, 0x0) pidfd_getfd(r4, r3, 0x0) [ 2664.819782] loop6: detected capacity change from 0 to 135266304 12:21:30 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2664.991065] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2665.015051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:21:30 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(r2, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x10000006}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:21:30 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2665.062094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.063716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.065500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x766a0, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="d7951f60fb6bfaf0f4d6c87eddde6ebcc00ad1b638989376886975584853f5de32dffe5af3057ffd95e5e2dc0c999de888e7d9f1bfb91b6a0d888886ec8e4635da31fbe2a72c9e9ba05c2ed25ee15ecc9f3142683e649792e52a21229944a7d7f04a7a03d36b758c9f86f533c17c8fd8ca903b7471ee1bd0fff6f805461ed14f36d4a650913fd877c87f71ddd5a265f4032f93b32e366a18768082712025e5b08aca0e322da77d640e43888bd9a915fc88f2c7d9745be34a49f5ad0c235a8ae86c06b803983ac5a2d03564527a558e280ce0ca800050e5a745fb39402a85dfdebd77de00d070"], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:21:30 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2665.218023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2665.267448] loop6: detected capacity change from 0 to 135266304 [ 2665.343301] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2665.355932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2665.422334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2665.423866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2665.447666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2670.169232] Bluetooth: hci1: command 0x0409 tx timeout [ 2672.217243] Bluetooth: hci1: command 0x041b tx timeout [ 2674.264319] Bluetooth: hci1: command 0x040f tx timeout [ 2675.363872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2675.366714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2675.378493] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2675.412956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2675.415048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2675.418492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2675.592991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.608743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2676.312244] Bluetooth: hci1: command 0x0419 tx timeout 12:21:55 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:55 executing program 6: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:21:55 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9b, 0x81}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="ec2a48e0000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:21:55 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:21:55 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:21:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000280)={0x0, 0x7, 0x1, [0x3, 0x2, 0x3, 0x6, 0xfffffffffffffffd], [0x81, 0x5, 0x1, 0x6c28, 0x6, 0x9, 0xf4, 0x3, 0x2, 0x3, 0x1922a7c8, 0xff, 0x20, 0x1, 0x7, 0x3, 0xe8, 0x8, 0x7, 0x2, 0x2, 0x6, 0x4, 0x7, 0xf3, 0x6, 0x5, 0xe68, 0x2e00000000000000, 0x200, 0x3, 0xeff, 0xfffffffffffffff9, 0xfffffffffffffffe, 0x1, 0x0, 0x373, 0xfffffffffffffffe, 0xc48, 0x81, 0x7fff, 0x81, 0x180000000000, 0x7, 0xd59f, 0x7fff, 0xa, 0xf55, 0xab, 0x3ff, 0x4, 0x320c7e97, 0x5, 0x2, 0x3, 0x2, 0xffff, 0x2, 0x8, 0x4, 0x1, 0x2a, 0x6, 0xffffffffffffff39, 0xfff, 0x0, 0x1, 0x8ef9, 0x800, 0x81, 0x6, 0x4, 0x7, 0x88, 0xfffffffffffffffb, 0x4, 0x2, 0xffff, 0x2, 0x9, 0xd9, 0x3, 0x50, 0x4, 0x1, 0x1, 0x4, 0x8, 0x4, 0x1, 0x162, 0x80000001, 0x7, 0x400, 0xdfac, 0x10000, 0x3, 0x9, 0x0, 0x6f7, 0x1, 0x800, 0x401, 0x9, 0x4, 0x5, 0xdf96, 0x6, 0x10000, 0x62c, 0x80000001, 0x1, 0x7, 0x7f, 0x7fffffff, 0x4, 0x7fffffff, 0x9, 0x9ba, 0x6, 0x9]}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r1, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x20010, r1, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd=r1, 0xfffffffffffffeff, &(0x7f0000000080)="37df2f881e09fd18c1581ddf72973ab906d4312cce8d703ee4132b3208deee766dd71bc649015eade2b91fb3668b0390f2a350bd518c4af5c3224c451e1ecac55dd65da8322d46d9b6b875c1d268d4ea182c2a218722963091c8a08630e4d1ea3346bff3558e0184bb69a195dbfd14c4f7bba551dbcbb1774c3571567f000247269c5234cd52bbd738cfb07cbcbc4cfcb71b31b9981b49bd168f948af9df266bfcb822c1dd51c794f656adc3f932325b722eaa16de4b002617e571a9ea7885bf7daca8c928b617", 0xc7, 0x14, 0x0, {0x0, r5}}, 0x4) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2690.704496] loop6: detected capacity change from 0 to 135266304 [ 2690.724943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.748828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.754048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:56 executing program 6: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2690.764117] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.794631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2690.805959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2690.806910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2690.807905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:56 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r4, 0x0, r3) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000000280)={{r0}, "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"}) [ 2690.899449] loop6: detected capacity change from 0 to 135266304 [ 2690.925967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:21:56 executing program 6: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:21:56 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x4) [ 2690.981003] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2690.987784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2690.989369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2690.992374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:21:56 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:21:56 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2691.117942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:21:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2691.179887] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2691.234013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2691.234889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2691.235809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2691.278906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40080, 0x104) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000580)=0x135) recvmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000200)=""/32, 0x20}, {&(0x7f0000000280)=""/235, 0xeb}], 0x4, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x40000020) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:22:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:11 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x53}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:22:11 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:11 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:11 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x20, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x61100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0xa554, 0x0, 0x5f, 0x0, 0x4000008, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:22:11 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2706.694567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2706.698486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2706.701495] loop6: detected capacity change from 0 to 135266304 [ 2706.703821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2706.712640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:12 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2706.771764] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 12:22:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2706.821673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2706.822608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2706.824983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2706.858463] loop6: detected capacity change from 0 to 135266304 12:22:12 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:12 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:12 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:12 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsetxattr$security_selinux(r0, &(0x7f0000000100), &(0x7f00000001c0)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x3) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:22:12 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2707.002829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2707.014533] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2707.019148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2707.020803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2707.027443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2707.040345] loop6: detected capacity change from 0 to 135266304 12:22:29 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:29 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100000, 0x2, 0x0, 0x1}, 0x0, 0xb, r4, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000000c0)='*[\'$\'^*/]::#\x00', &(0x7f0000000100)='/^\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:22:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x65}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:22:29 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66696c6530000508d93c314b16a91d873c18e2a762ea7028f4188c50c3a504e332159a7e4f7704388d4f494b7df269916a54f8e2b80917f9c6d4cc92b59a5d"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x3d}, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r6 = syz_io_uring_setup(0x386f, &(0x7f00000001c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index, 0x0, {}, 0x0, 0x2, 0x0, {0x0, r10}}, 0x1) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x610a28b421642525, 0x12345, {0x0, r10}}, 0x10001) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:22:29 executing program 5: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2723.893463] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2723.948683] loop6: detected capacity change from 0 to 41948160 [ 2723.957698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2723.971786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2723.977563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2723.980081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2723.983023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:22:29 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2724.001597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:29 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000001480)=[{&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000280)=""/161, 0xa1}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000340)=""/153, 0x99}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x8, 0xfffffc01, 0x8000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:22:29 executing program 1: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2724.333831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:22:29 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:22:29 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x65}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:22:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:22:29 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2724.506004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2724.507700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2724.509549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2724.690997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2724.721023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2724.745651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) 12:22:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x0, 0x1}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:22:43 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:22:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:43 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:43 executing program 0: r0 = syz_io_uring_setup(0x3763, &(0x7f00000001c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x1ce96a1d274dcb2e, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_setup(0xee6, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x76d7, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x7e3, 0x2) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x97, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1480b, 0x0, 0x0, 0x5, 0x0, 0x0, 0xac}, 0xffffffffffffffff, 0xffdffffdffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x1e95, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0, 0x3d}, 0x0) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r10, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0xa3c511085e813f8, 0x4004, @fd=r11, 0x2, 0x4ea, 0x3, 0x10, 0xc43eceeeddc5d5c5, {0x2}}, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 12:22:43 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:22:43 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000000000001da23e00"/21]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2738.433066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2738.469102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:43 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2738.482693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2738.506544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:43 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) [ 2738.531135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2738.532784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2738.536691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:22:43 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:22:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2001}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2738.704654] loop6: detected capacity change from 0 to 41948160 12:22:44 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) [ 2738.840084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:22:44 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x2}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:22:44 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:22:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x0, 0x1}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2739.002355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2739.003909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2739.016484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:22:44 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2739.115153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2739.119960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2739.139219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2739.152080] FAT-fs (loop6): bogus number of reserved sectors [ 2739.153327] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2739.239552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2739.343650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2739.345974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2739.347902] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x0, 0x1}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:23:00 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x3}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:00 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/thermal', 0x741001, 0x109) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000240)={r1}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) listen(r0, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) unshare(0x48020200) 12:23:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) 12:23:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6erspan0\x00'}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:23:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:23:00 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:23:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) [ 2755.475885] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2755.476829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2755.483467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2755.496662] FAT-fs (loop6): bogus number of reserved sectors [ 2755.497862] FAT-fs (loop6): Can't find a valid FAT filesystem 12:23:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2755.529615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:00 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2755.589651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2755.591566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2755.605406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x78afd4e6af5623c, 0x4a) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, r4) accept4(r5, 0x0, &(0x7f0000000080), 0x80800) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x4000811, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$sock_buf(r2, 0x1, 0x37, &(0x7f0000000100)=""/104, &(0x7f0000000180)=0x68) r7 = accept4$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x0) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:23:00 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) [ 2755.645317] FAT-fs (loop6): bogus number of reserved sectors [ 2755.645995] FAT-fs (loop6): Can't find a valid FAT filesystem 12:23:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x440) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2755.814064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:15 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:15 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="210000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="2e2f66076c656808afd83000"]) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$CDROMVOLREAD(r1, 0x5313, &(0x7f0000000280)) creat(&(0x7f0000000100)='./file0\x00', 0xd8) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:23:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:23:15 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:23:15 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:15 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) 12:23:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) r3 = syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000080)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:23:15 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2770.564680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2770.579100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2770.590175] FAT-fs (loop6): bogus number of reserved sectors [ 2770.592203] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2770.624696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2770.641963] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2770.651739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) [ 2770.701116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2770.702892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2770.704878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x28) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x80, 0x6d3}, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffdffffffffd}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:23:16 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2770.835342] FAT-fs (loop6): bogus number of reserved sectors [ 2770.836734] FAT-fs (loop6): Can't find a valid FAT filesystem 12:23:16 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) 12:23:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:16 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r2, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) dup2(r5, r0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x7}, 0x0, 0x0, 0x1f, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2770.990140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2771.056730] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2771.102753] FAT-fs (loop6): bogus number of reserved sectors [ 2771.104114] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2771.140609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2771.142268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2771.143948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:34 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:23:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:23:34 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000200)={0x4, 0x0, 0x4}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1, 0x30c6d32f}}, './file0\x00'}) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:23:34 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x5}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:34 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:23:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0x6e, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/213, 0xd5}], 0x5, &(0x7f00000015c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x40000000) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x40, 0x3f, 0x6, 0x0, 0x100000001, 0x440, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2fd, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x40, 0x2, 0x1, 0x6, 0x4, 0x870, 0x4, 0x0, 0xfffffffe, 0x0, 0x8}, r3, 0x1, r4, 0x0) 12:23:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:34 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:23:34 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) [ 2788.875121] loop6: detected capacity change from 0 to 41948160 [ 2788.887929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2788.894957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2788.906929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2788.909239] FAT-fs (loop6): bogus number of reserved sectors [ 2788.910621] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2788.943507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2788.958135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2788.996494] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2789.012610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.014385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.016452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:34 executing program 5: openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002e00)=""/4110, 0x100e}], 0x1000000000000048) 12:23:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:23:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000080)=""/208, 0xd0}], 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 2789.065654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.066549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.067604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:23:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2789.145385] loop6: detected capacity change from 0 to 41948160 12:23:34 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000"/56, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2789.160968] FAT-fs (loop6): bogus number of reserved sectors [ 2789.161882] FAT-fs (loop6): Can't find a valid FAT filesystem 12:23:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) 12:23:34 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) 12:23:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:23:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2789.274000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2789.323624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 12:23:34 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) [ 2789.353993] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2789.379609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:34 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x6}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2789.395724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2789.403775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2789.405356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2789.409786] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2789.441120] loop6: detected capacity change from 0 to 41948160 [ 2789.452053] FAT-fs (loop6): bogus number of reserved sectors [ 2789.452754] FAT-fs (loop6): Can't find a valid FAT filesystem 12:23:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2789.582611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2789.705537] loop6: detected capacity change from 0 to 41948160 [ 2789.728656] FAT-fs (loop6): bogus number of reserved sectors [ 2789.730208] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2789.893397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2792.728271] Bluetooth: hci1: command 0x0406 tx timeout [ 2794.456307] Bluetooth: hci0: command 0x0409 tx timeout [ 2796.504289] Bluetooth: hci0: command 0x041b tx timeout [ 2798.552296] Bluetooth: hci0: command 0x040f tx timeout [ 2799.712854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2799.715236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2799.718533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2799.786316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2799.788182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2799.790945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2799.951111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2800.600266] Bluetooth: hci0: command 0x0419 tx timeout 12:24:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:24:01 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000"/56, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:24:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) r3 = getpgrp(0x0) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0)=[0x541], &(0x7f0000000100), 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:24:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:24:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, 0x0, 0x0) 12:24:01 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r5, 0x0, r4) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000001c0)=[r1, r2, r0, r1, r5], 0x5) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) r7 = dup2(0xffffffffffffffff, r6) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r8, &(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0x8, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x0, 0xcbd9, 0x4, 0x2}) unshare(0x48020200) 12:24:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:24:01 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x7}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2816.219138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.228701] loop6: detected capacity change from 0 to 41948160 [ 2816.235917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.240561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.249814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.251125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2816.256039] FAT-fs (loop6): bogus number of reserved sectors [ 2816.256772] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2816.263126] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.263609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:01 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) [ 2816.302464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.303542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.304481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:24:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:24:01 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000"/56, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:24:01 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{0x0}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2816.518862] loop6: detected capacity change from 0 to 41948160 [ 2816.523440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.525989] FAT-fs (loop6): bogus number of reserved sectors [ 2816.526765] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2816.551427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2816.560442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2816.561374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2816.627959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:24:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) 12:24:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:24:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{}, {0x0, 0x1}, {}, {0x16, 0x1}, {}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) nanosleep(0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @device_b, {0x3, 0x4}}, {0x2, 0x1, 0x1, 0x0, 0x88}}, {@type00={{0x0, 0x2, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_b, @device_b, @initial, {0x8}}, {0x4, 0x0, 0x0, 0x1, 0x7}}}, @a_msdu=[{@device_a, @broadcast, 0x1a, "c0bbae0b56ac845fa30924c4f185837977ada87762e961dfa28e"}, {@device_a, @broadcast, 0xc, "278a7708499b4a0e83aef95c"}, {@device_b, @device_b, 0x3b, "32f3b706647921508480d30eacece3d448b9859432d2ab8f09b24e58e0070cbeb7b058479f8f3def330afa8079c704b6ea671e4be3856b457f2302"}]}, 0xca) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x28, 0x3, 0x885b) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12:24:17 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x420080, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x4, 0x81, 0xff, 0x8, 0x0, 0x4, 0x10800, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x5, @perf_config_ext={0x9, 0x1f}, 0x4, 0x3, 0x30, 0x7, 0x3, 0x7, 0x101, 0x0, 0xab70, 0x0, 0xe52c}, 0xffffffffffffffff, 0xc, r2, 0x1) 12:24:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x8}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:17 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:24:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:24:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2831.757892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2831.778479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2831.795528] loop6: detected capacity change from 0 to 41948160 [ 2831.832094] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2831.840392] FAT-fs (loop6): bogus number of reserved sectors [ 2831.841709] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2831.851875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2831.853419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2831.855136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:24:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400), 0x0) [ 2831.957636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:17 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) 12:24:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) 12:24:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6405c0, 0x89) fsmount(r0, 0xe7fcafb4d5b12c37, 0x74) r1 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000040)) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000180)=""/149, 0x95}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x21) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}], [{@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@obj_user}, {@appraise_type}, {@uid_gt={'uid>', r5}}, {@seclabel}]}}) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffdffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 12:24:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) 12:24:17 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x18120, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2e2f66696c653000c55acd30ff5117df5dbbf1c94e7b59c4c76cb1ffb9b73d79ec89472f34cfcfbe92f2feeb225c43426b54fe1aaf64768fe90a85a95346a3d99b617dcc9083321976d948a365fb85ee7051105d0fa7cf7cf5e0a4854eaab8acbd2cb912558aa896c7ace926f78e694ea9d22511839e19d61e853f586b769398ff7bdec38a9a63b4deae9489d64e2829244a9fe493e4a42305647520e64b87a132e9f1b300c1ba2df11809823c15c433abf2837287d1c06cf0"]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1ff}, 0x0, 0x0, 0x4, 0x3, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714ba0000100000b62e8c84000000fe8000000000000000000000000000aa00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r6, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) dup2(r7, r0) [ 2832.108092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2832.158333] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2832.237915] loop6: detected capacity change from 0 to 41948160 12:24:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) fcntl$dupfd(r1, 0x0, r0) dup3(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x9}, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 2832.246115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2832.248449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2832.253967] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2832.257417] FAT-fs (loop6): bogus number of reserved sectors [ 2832.259016] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2832.289089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 12:24:17 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) readv(r0, &(0x7f0000000400)=[{0x0}], 0x1) 12:24:17 executing program 4: ioctl$CDROMREADMODE1(0xffffffffffffffff, 0x530d, &(0x7f0000000580)={0x0, 0x81, 0xff, 0x2, 0xa7, 0x7}) r0 = socket$unix(0x1, 0x1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000e90000000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x1f, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) unshare(0x48020200) [ 2832.329648] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 12:24:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) [ 2832.360645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2832.362586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2832.365947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2832.524652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2832.554217] loop6: detected capacity change from 0 to 41948160 [ 2832.565317] FAT-fs (loop6): bogus number of reserved sectors [ 2832.566823] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2837.272211] Bluetooth: hci1: command 0x0409 tx timeout [ 2837.528310] Bluetooth: hci4: command 0x0409 tx timeout [ 2839.321145] Bluetooth: hci1: command 0x041b tx timeout [ 2839.576232] Bluetooth: hci4: command 0x041b tx timeout [ 2840.271590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2840.272639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2840.274362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2840.291471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2840.292388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2840.293656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2840.446900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2840.456553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2841.269778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2841.272031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2841.283229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2841.319723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2841.321751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2841.325430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2841.369564] Bluetooth: hci1: command 0x040f tx timeout [ 2841.521021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2841.624256] Bluetooth: hci4: command 0x040f tx timeout [ 2843.417615] Bluetooth: hci1: command 0x0419 tx timeout [ 2843.672277] Bluetooth: hci4: command 0x0419 tx timeout [ 2915.608313] Bluetooth: hci0: command 0x0406 tx timeout [ 2960.665630] Bluetooth: hci1: command 0x0406 tx timeout [ 2960.665667] Bluetooth: hci4: command 0x0406 tx timeout VM DIAGNOSIS: 12:29:19 Registers: info registers vcpu 0 RAX=ffffffff83e8ee20 RBX=0000000000000000 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f90c330f058 CR3=000000001afc8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ce02fe016c6c6f502e726567616e61 XMM02=6465657320636578650a0a0100010101 XMM03=650e006c61746f7420636578650a0073 XMM04=650d006574616469646e616320636578 XMM05=78650a00657a696d696e696d20636578 XMM06=6820636578650a006873616d73206365 XMM07=7220726f747563657865110073746e69 XMM08=746f7420636578650a00736465657320 XMM09=616469646e616320636578650e006c61 XMM10=7a696d696e696d20636578650d006574 XMM11=650a006873616d7320636578650a0065 XMM12=7563657865110073746e696820636578 XMM13=78650800737472617473657220726f74 XMM14=7a7566206365786509006e6567206365 XMM15=000065676169727420636578650b007a info registers vcpu 1 RAX=ffffffff83e8ee20 RBX=0000000000000001 RCX=ffffffff83e769bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e8f428 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85678ec8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e8ee2e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f90c3245c10 CR3=000000001afc8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004124d10000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000