r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:02:27 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:02:27 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:02:27 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:27 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b800"/89], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:28 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:02:28 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1379.484650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.485705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1379.486703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:02:44 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:44 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:02:44 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:02:44 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:44 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:02:44 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:02:44 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:02:44 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1396.253855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:02:45 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:45 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:45 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:02:45 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:02:45 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:02:45 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1396.652913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1396.654526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1396.656569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:02:45 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:02:45 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:02:45 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:02:45 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1396.847130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:02:45 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1397.179711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1397.181650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1397.240013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:04 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:04 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:04 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:03:04 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:04 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:04 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:04 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:04 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1416.155855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1416.191200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:03:05 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:05 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1416.548916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1416.550558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1416.552534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:05 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:05 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:05 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:05 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:05 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:03:05 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1416.753840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1417.122786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1417.124366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1417.126384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:22 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:22 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:03:22 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:22 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/156], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:22 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:22 executing program 1:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1434.188838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:03:22 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:22 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1434.221711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:03:23 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:23 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:23 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:23 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:23 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:03:23 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1434.885006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1434.886653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1434.888441] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:43 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:43 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1454.750464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:03:43 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d7693978"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:43 executing program 1:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:43 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:43 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:03:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1454.915123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:03:43 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:43 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:43 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb800"/167], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1455.131171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:03:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1455.248287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.249920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.252257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:44 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:44 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:44 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1455.414033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:03:44 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1455.518420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1455.702111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.703749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.705791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:03:59 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:59 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:03:59 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:03:59 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:03:59 executing program 0:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:59 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:59 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:03:59 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1471.123225] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1471.133219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:04:00 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:00 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:00 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:00 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:00 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:00 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1471.863565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1471.865348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1471.867148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:00 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1472.033663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1472.227143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1472.229127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1472.233187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:16 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:04:16 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1488.170837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:04:16 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:16 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:04:16 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:16 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:16 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:16 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1488.227063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1488.246892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.248485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.250923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:17 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:04:17 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1488.497952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:04:17 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:17 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:17 executing program 0:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:17 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:17 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1488.787208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1488.968605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1488.970275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1488.971948] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:17 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:17 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r4, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:04:17 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c64"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1489.123049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1489.131865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1489.274399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1489.276185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1489.277877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:37 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:37 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:37 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:37 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:37 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:37 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c173"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:04:37 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:04:37 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1508.621549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1508.645442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:04:37 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a0000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:37 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:37 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:04:37 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:37 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1509.183023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:04:38 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:38 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1509.446856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:04:55 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:04:55 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:04:55 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:55 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:55 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c173"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:04:55 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:55 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:55 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
[ 1526.872071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1526.875881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1526.959522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:04:55 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:55 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a000000000000000000"], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:04:55 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1527.112082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1527.113242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.120429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1527.124488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1527.126078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1527.127722] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:04:55 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:04:55 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:55 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:04:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1527.338732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:13 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:05:13 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:13 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:05:13 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:05:13 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:13 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:13 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:13 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1544.623468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1544.763868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:13 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:13 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1544.942014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.942951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.943978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:05:13 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:13 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:05:13 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:05:13 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:05:13 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1545.072963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1545.094979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:05:13 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:13 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:13 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1545.184970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1545.185882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1545.186830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1545.207659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:14 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:14 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4b"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:05:14 executing program 0:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:14 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1545.452833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1545.581468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1545.582648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1545.583563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:05:30 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:05:30 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:30 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:05:30 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:30 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:30 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:05:30 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:30 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1561.562527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:05:30 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1561.609656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:30 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1561.903646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1561.905263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1561.907863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:05:45 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:45 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:46 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:05:46 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:05:46 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1577.333372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1577.335190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:05:46 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:05:46 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1577.567812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.568874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1577.569974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1577.601509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:46 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:05:46 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:05:46 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1577.798622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:05:46 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:05:46 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1577.966683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:05:46 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:05:46 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1578.040852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1578.042731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1578.045095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:06:05 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:05 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:05 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:05 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0))
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:05 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:05 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1597.021667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:05 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:06:05 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1597.125502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:06:05 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:06 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:06 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:06 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:06:06 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:06:06 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1597.481641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1597.483308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1597.489827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:06:06 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:06:06 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4b"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:06:06 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1597.621092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:06 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:06 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:06:22 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:22 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:22 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:22 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:06:22 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1614.112991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:22 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:06:22 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:06:22 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1614.127945] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:06:23 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:23 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:23 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:23 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:06:23 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:06:23 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1614.538848] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:23 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1614.579676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1614.581612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1614.584070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:06:23 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1614.718912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1614.742563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1614.744257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1614.747312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:06:38 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0))
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:38 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:38 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:38 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:06:38 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:38 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:38 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:06:38 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/23, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1629.831671] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1629.899486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:38 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:38 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:06:38 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1630.298907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1630.299836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1630.300968] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:06:56 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:56 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:56 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:06:56 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1c"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:06:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:06:56 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:56 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:56 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1647.711109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1647.809736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:06:56 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:06:56 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:06:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/35, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1648.334142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1648.335782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1648.337579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:07:14 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:14 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:07:14 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1665.393161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:07:14 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:14 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1665.427528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:14 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)

07:07:14 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:14 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)

07:07:14 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:14 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0))
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r1 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:14 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)

[ 1666.014643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.017002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.018736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:07:14 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:14 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:07:14 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:07:14 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

[ 1666.272180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:07:15 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/41, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1666.307890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:15 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

07:07:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

07:07:15 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

[ 1666.761261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1666.762787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1666.765666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1666.860048] Zero length message leads to an empty skb
07:07:34 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:34 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:34 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:34 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:07:34 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:07:34 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:34 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

07:07:34 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1685.759642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1685.801940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1685.804448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:07:34 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

07:07:34 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:34 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:34 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/44, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:34 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:34 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:35 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1686.298627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.300259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:07:35 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:07:35 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:35 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1686.520782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1686.523849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:53 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:53 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:53 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1704.340884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:53 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:53 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:07:53 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:53 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:53 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1704.367734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:07:53 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:07:53 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:53 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1704.517504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:07:53 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:07:53 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:07:53 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1704.702584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1704.703486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1704.704516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:08:09 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:09 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:08:09 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:08:09 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:09 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/45, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1720.920474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:08:09 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:09 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:08:09 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1720.944723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1720.972072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:08:09 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:08:09 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:09 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1721.239555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1721.241302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1721.243648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:08:10 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:10 executing program 0:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1721.329551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
07:08:28 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:28 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:28 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:28 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:08:28 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:08:28 executing program 0:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1740.161665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1740.186872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:08:29 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:08:29 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:08:29 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:29 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:29 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:29 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1740.632461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1740.634497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1740.719694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1751.029332] kmemleak: 26 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
07:08:48 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:48 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:08:48 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:08:48 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:48 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:08:48 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:48 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1759.881578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:08:48 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1759.928693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:08:48 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:08:48 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:49 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:49 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:49 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:08:49 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:08:49 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1760.519948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1760.520871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1760.521740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:09:06 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:06 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:06 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:06 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:09:06 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:06 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:09:06 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:09:06 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1778.055186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1778.082870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:09:06 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:09:06 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1778.231447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:09:07 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:07 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:07 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:07 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1778.496412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1778.497374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1778.498279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:09:24 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:09:24 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:24 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:09:24 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:24 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:24 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:24 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:09:24 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1795.579493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1795.588746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:09:24 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)

07:09:24 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:09:24 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:24 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)

07:09:24 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:24 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280), 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:24 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0x0)

[ 1796.051644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1796.053433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1796.057110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:09:43 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:09:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:43 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:09:43 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:43 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:43 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:09:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280), 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:43 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

[ 1814.475035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1814.490611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:09:43 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

07:09:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:43 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:09:43 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

07:09:43 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1814.768500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1814.770128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1814.772057] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1814.775887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1814.820909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
07:09:43 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1814.823854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1814.826423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:09:43 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:09:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280), 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:09:43 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

[ 1814.881722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1814.885581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:09:43 executing program 1:
r0 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000040)=""/89)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0xff24)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x2, 0x7ff, 0x0, 0x4, 0x0, 0x849}}, 0x43)
r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
shmctl$SHM_STAT(r0, 0xd, &(0x7f00000001c0)=""/54)
r4 = socket$inet(0xa, 0x3, 0xff)
write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x79, 0x1}, 0x7)
r5 = dup(r4)
r6 = syz_io_uring_setup(0x56dd, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r9}}, 0x0)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x4010, r3, 0x10000000)
syz_io_uring_submit(r7, r10, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2004, @fd_index=0x5, 0x81, 0x9, 0xffff, 0xd, 0x0, {0x2}}, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000180)=0xa4ffffff, 0x4)
ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000280)=0x8000000)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40086607, &(0x7f0000000000)={0x80000000})

[ 1814.941577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1814.943380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1814.945139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:09:43 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:09:43 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:09:43 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1815.060909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1815.194318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1815.195928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1815.197542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:01 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

07:10:01 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:01 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:01 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:01 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:01 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{0x0}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:02 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:02 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1833.234183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1833.247493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:10:02 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)

07:10:02 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:02 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1833.769676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1833.771906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1833.773975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1851.318976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:10:20 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:20 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:20 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:20 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:20 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:20 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{0x0}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:20 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:20 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1851.351904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1851.356916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
07:10:20 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:20 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:20 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{0x0}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:20 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x0, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1851.652548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1851.654112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1851.657488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1851.659016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1851.664178] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1851.666973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:20 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:20 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:20 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:10:20 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:20 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:20 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1851.811450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1851.828740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:10:20 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1851.909911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1851.911437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1851.915468] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:39 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:39 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:39 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:39 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:39 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:39 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:10:39 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0x0, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:39 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1871.026444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1871.041696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1871.070924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1871.071907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1871.072906] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:39 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:39 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1871.209455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1871.212559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:10:40 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:40 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1871.256860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1871.258062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1871.258951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:40 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:40 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1871.343103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:10:40 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:40 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1871.368452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1871.416170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1871.417065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1871.417964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:10:56 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:56 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:10:56 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1887.772847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1887.796122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1887.819656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1887.821489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1887.826056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:56 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:56 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x0, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:10:56 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1887.934040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1887.970819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1888.018064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1888.019949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1888.021692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:10:56 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:10:56 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:10:56 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1888.096070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:10:56 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:10:56 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1906.121468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:11:14 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:11:14 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:14 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:11:14 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:14 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:14 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

[ 1906.166138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:11:14 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:14 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:11:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1906.379428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:11:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:15 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:11:15 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

07:11:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1906.736387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1906.737910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1906.739525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:11:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:15 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:15 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0)

07:11:15 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:11:15 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:15 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()

[ 1907.118752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1907.121017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:11:16 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:16 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 1907.345418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1907.462821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1907.464239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1907.465416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1923.963115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:11:32 executing program 7:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:11:32 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

07:11:32 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:32 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:32 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:32 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
[ 1924.005942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1924.026877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:32 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:32 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:32 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1924.135035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1924.262736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1924.264392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1924.266061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1948.560872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:11:57 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:57 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:57 executing program 7:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:57 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:57 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:57 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
[ 1948.580450] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:57 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(r3, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:57 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
socket$inet6_udplite(0xa, 0x2, 0x88)

07:11:57 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

07:11:57 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(r3, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:57 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:57 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:57 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:11:57 executing program 3:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1949.173974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1949.224816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1949.226451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1949.228151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:11:58 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:11:58 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:11:58 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:11:58 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

[ 1949.489588] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1949.783044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1949.784477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1949.785659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:12:14 executing program 1:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(r3, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:14 executing program 7:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1966.246422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:12:14 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:14 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:15 executing program 0:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})

07:12:15 executing program 3:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1966.273749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1966.276131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 1966.291419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
07:12:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1966.475003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:12:15 executing program 7:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1966.615004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'.
[ 1966.627935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1966.629858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1966.631423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1966.632970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1966.634605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1966.637158] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1966.658160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1966.659739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1966.661401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:12:30 executing program 3:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r0, 0x0)
keyctl$get_security(0x11, r0, 0x0, 0x0)
getuid()
r1 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000640)="b8cfac7c69d18e80dd5a13ca56d15eff94429f51533b11042beaddff4ab8bb038362549d68faf3ae3bf8430c82024e85ccd09938341e318f72188326ea3df3f64416af2d65bd3029a043c10cae0a38ffd0addfd86fdce2a8a00291c1d16d8195b3df5452c2e26394cfa7e65c0ada29e43db76225dfa66f620554e4afb731ba4e8ec94bb715ef68d872b89468f2eb3f10ab37d3ff0489bb6b6a70", 0x9a, r0)
keyctl$setperm(0x5, r1, 0x10040820)
keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x1)
keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00')
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="d49a6f7b9e6d3bd10f84074416ef20833bef0cae416683b2ff1d40d70d71848cfc7fa9e9ad9bdcc3ab7a284cca81bbc9b5554a312c1ac55faa1df0c14cdd329d6fb341fa0f9b5af9c416655e58d7557a49ee148361d112a00e6cf6cd750cab69465c0f9f84b81bfa2336bb05d20caf9ef754b7ff022684770a748bdacce88fd6c3014f9dc6d944219a9a82a6613b93a9d4233a52807f8f93e90b3f4f66e676c24b3b75dc5eb93ef4b560e334ec0667f4b55443c31d5213173acbd90cacaad69add22594aadb937125199f17bea7d54a0dcc0b52d7bfe09746a3f9d205e12de2e84ad2611e43411ba", 0xe8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="05e149f80441a5f35c953b521e4d98ec963de51731ddb5ab6cad656d53043b9472c415299857cf03688fed3781f41b62a92cce98250247369fec1daeff537b787e81854b729da668bf56139780c55563338a8d8147a94c773c49e8d43b", 0x5d}, {&(0x7f00000000c0)="48382464238600", 0x7}, {&(0x7f00000003c0)="6ec965323fa7738720657fd858da0ca365a9f0a053a9f0b81ba649d3f386402642ffcafb4b39138e408b79a29340221feaeaf5cc661a0829706178a0cf839ac23021b3c75b47a8f2f5106eaa166d724b84ed563d7dd93988f5bacf001f9dd064e2b45909e64c2e55e987ec5f297e8f9c5bb845072a26f41d138c39bd735b5f6085414d48f5f03e7a30c740454816", 0x8e}], 0x3}}], 0x2, 0x4000805)
sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0)

07:12:30 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(0x0, r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:30 executing program 7:
clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0)
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$setperm(0x5, r0, 0x0)
keyctl$get_security(0x11, r0, 0x0, 0x0)
getuid()
r1 = add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, &(0x7f0000000640)="b8cfac7c69d18e80dd5a13ca56d15eff94429f51533b11042beaddff4ab8bb038362549d68faf3ae3bf8430c82024e85ccd09938341e318f72188326ea3df3f64416af2d65bd3029a043c10cae0a38ffd0addfd86fdce2a8a00291c1d16d8195b3df5452c2e26394cfa7e65c0ada29e43db76225dfa66f620554e4afb731ba4e8ec94bb715ef68d872b89468f2eb3f10ab37d3ff0489bb6b6a70", 0x9a, r0)
keyctl$setperm(0x5, r1, 0x10040820)
keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x1)
keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00')
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000180)=""/47, 0x2f}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000002c0)="d49a6f7b9e6d3bd10f84074416ef20833bef0cae416683b2ff1d40d70d71848cfc7fa9e9ad9bdcc3ab7a284cca81bbc9b5554a312c1ac55faa1df0c14cdd329d6fb341fa0f9b5af9c416655e58d7557a49ee148361d112a00e6cf6cd750cab69465c0f9f84b81bfa2336bb05d20caf9ef754b7ff022684770a748bdacce88fd6c3014f9dc6d944219a9a82a6613b93a9d4233a52807f8f93e90b3f4f66e676c24b3b75dc5eb93ef4b560e334ec0667f4b55443c31d5213173acbd90cacaad69add22594aadb937125199f17bea7d54a0dcc0b52d7bfe09746a3f9d205e12de2e84ad2611e43411ba", 0xe8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="05e149f80441a5f35c953b521e4d98ec963de51731ddb5ab6cad656d53043b9472c415299857cf03688fed3781f41b62a92cce98250247369fec1daeff537b787e81854b729da668bf56139780c55563338a8d8147a94c773c49e8d43b", 0x5d}, {&(0x7f00000000c0)="48382464238600", 0x7}, {&(0x7f00000003c0)="6ec965323fa7738720657fd858da0ca365a9f0a053a9f0b81ba649d3f386402642ffcafb4b39138e408b79a29340221feaeaf5cc661a0829706178a0cf839ac23021b3c75b47a8f2f5106eaa166d724b84ed563d7dd93988f5bacf001f9dd064e2b45909e64c2e55e987ec5f297e8f9c5bb845072a26f41d138c39bd735b5f6085414d48f5f03e7a30c740454816", 0x8e}], 0x3}}], 0x2, 0x4000805)
sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0)

07:12:30 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:30 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:30 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:12:30 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:30 executing program 4:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(r3, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1981.731680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1981.775137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1981.777860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
07:12:30 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:30 executing program 7:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:12:30 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 1981.995560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1981.996685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1981.997785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:12:30 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1982.053543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:12:30 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:30 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(0x0, r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:30 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:12:31 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:31 executing program 3:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 1982.297085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1982.304678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1982.306396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:12:31 executing program 1:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:31 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 1982.347459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1982.415391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
07:12:31 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:31 executing program 7:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1982.478829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1982.489745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1982.490597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1982.491550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1982.494321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1982.495161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1982.497270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1982.501439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1982.502277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1982.503599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:12:31 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:31 executing program 4:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:31 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:31 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:12:31 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x1f, 0x3, 0x0, 0x0, 0x5})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(r3, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:12:31 executing program 1:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 1982.863077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1982.863969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1982.864867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:12:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 1)

07:12:48 executing program 0:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:12:48 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2000.095963] FAULT_INJECTION: forcing a failure.
[ 2000.095963] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.098685] CPU: 0 PID: 56035 Comm: syz-executor.1 Not tainted 5.10.239 #1
[ 2000.100141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.101913] Call Trace:
[ 2000.102476]  dump_stack+0x107/0x167
[ 2000.103242]  should_fail.cold+0x5/0xa
[ 2000.104043]  ? kernfs_fop_write_iter+0x235/0x510
[ 2000.105057]  should_failslab+0x5/0x20
[ 2000.105860]  __kmalloc+0x72/0x390
[ 2000.106596]  kernfs_fop_write_iter+0x235/0x510
[ 2000.107554]  ? iov_iter_init+0x3c/0x130
[ 2000.108394]  new_sync_write+0x42c/0x660
[ 2000.109238]  ? new_sync_read+0x6f0/0x6f0
[ 2000.110091]  ? ksys_write+0x12d/0x260
[ 2000.110891]  ? lock_release+0x680/0x680
[ 2000.111730]  ? avc_policy_seqno+0x9/0x70
[ 2000.112581]  ? selinux_file_permission+0x92/0x520
[ 2000.113644]  vfs_write+0x7c0/0xb10
[ 2000.114404]  ksys_write+0x12d/0x260
[ 2000.115169]  ? __ia32_sys_read+0xb0/0xb0
[ 2000.116035]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.117156]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.118251]  do_syscall_64+0x33/0x40
[ 2000.119046]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.120135] RIP: 0033:0x7f07ed870b19
[ 2000.120940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.124870] RSP: 002b:00007f07eade6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2000.126527] RAX: ffffffffffffffda RBX: 00007f07ed983f60 RCX: 00007f07ed870b19
[ 2000.128043] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2000.129593] RBP: 00007f07eade61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.131121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.132649] R13: 00007ffca4e3476f R14: 00007f07eade6300 R15: 0000000000022000
[ 2000.141060] FAULT_INJECTION: forcing a failure.
[ 2000.141060] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 2000.143897] CPU: 1 PID: 56039 Comm: syz-executor.7 Not tainted 5.10.239 #1
[ 2000.145391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.146517] __nla_validate_parse: 3 callbacks suppressed
[ 2000.146549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2000.147154] Call Trace:
[ 2000.147189]  dump_stack+0x107/0x167
[ 2000.151365]  should_fail.cold+0x5/0xa
[ 2000.151405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2000.152170]  _copy_from_user+0x2e/0x1b0
[ 2000.154756]  __copy_msghdr_from_user+0x91/0x4b0
[ 2000.155731]  ? __ia32_sys_shutdown+0x80/0x80
[ 2000.156675]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.157782]  ? __lock_acquire+0x1657/0x5b00
[ 2000.158686]  ? __lock_acquire+0xbb1/0x5b00
[ 2000.159584]  sendmsg_copy_msghdr+0xa1/0x160
[ 2000.160509]  ? do_recvmmsg+0x6d0/0x6d0
[ 2000.161351]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.162723]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.163763]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.164878]  ___sys_sendmsg+0xc6/0x170
[ 2000.165710]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2000.166668]  ? __fget_files+0x2cf/0x520
[ 2000.167496]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.168363]  ? find_held_lock+0x2c/0x110
[ 2000.169225]  ? __fget_files+0x2f8/0x520
[ 2000.170059]  ? __fget_light+0xea/0x290
[ 2000.170880]  __sys_sendmsg+0xe5/0x1b0
[ 2000.171677]  ? __sys_sendmsg_sock+0x40/0x40
[ 2000.172583]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2000.173572]  ? fput_many+0x2f/0x1a0
[ 2000.174352]  ? ksys_write+0x1a9/0x260
07:12:48 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:12:48 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 1)

07:12:48 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 1)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:12:48 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 1)

[ 2000.175155]  ? __ia32_sys_read+0xb0/0xb0
[ 2000.176187]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.177300]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.178374]  ? trace_hardirqs_on+0x5b/0x180
[ 2000.179271]  do_syscall_64+0x33/0x40
[ 2000.180053]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.181129] RIP: 0033:0x7eff353eeb19
[ 2000.181904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.185755] RSP: 002b:00007eff32964188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2000.187343] RAX: ffffffffffffffda RBX: 00007eff35501f60 RCX: 00007eff353eeb19
[ 2000.188831] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
07:12:48 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2000.190325] RBP: 00007eff329641d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.191966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.193475] R13: 00007ffd7a430fdf R14: 00007eff32964300 R15: 0000000000022000
[ 2000.202009] FAULT_INJECTION: forcing a failure.
[ 2000.202009] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2000.204463] CPU: 1 PID: 56040 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2000.205932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.207684] Call Trace:
[ 2000.208233]  dump_stack+0x107/0x167
[ 2000.209001]  should_fail.cold+0x5/0xa
[ 2000.209834]  _copy_from_user+0x2e/0x1b0
[ 2000.210679]  __copy_msghdr_from_user+0x91/0x4b0
[ 2000.211655]  ? __ia32_sys_shutdown+0x80/0x80
[ 2000.212565]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.213667]  ? __lock_acquire+0x1657/0x5b00
[ 2000.214584]  ? __lock_acquire+0xbb1/0x5b00
[ 2000.215473]  sendmsg_copy_msghdr+0xa1/0x160
[ 2000.216377]  ? do_recvmmsg+0x6d0/0x6d0
[ 2000.217205]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.218299]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.219175]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.220287]  ___sys_sendmsg+0xc6/0x170
[ 2000.221113]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2000.222081]  ? __fget_files+0x2cf/0x520
[ 2000.222923]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.223803]  ? find_held_lock+0x2c/0x110
[ 2000.224667]  ? __fget_files+0x2f8/0x520
[ 2000.225515]  ? __fget_light+0xea/0x290
[ 2000.226352]  __sys_sendmsg+0xe5/0x1b0
[ 2000.227155]  ? __sys_sendmsg_sock+0x40/0x40
[ 2000.228052]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2000.229035]  ? fput_many+0x2f/0x1a0
[ 2000.229804]  ? ksys_write+0x1a9/0x260
[ 2000.230606]  ? __ia32_sys_read+0xb0/0xb0
[ 2000.231459]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.232563]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.233651]  ? trace_hardirqs_on+0x5b/0x180
[ 2000.234551]  do_syscall_64+0x33/0x40
[ 2000.235337]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.236402] RIP: 0033:0x7f5927a91b19
[ 2000.237179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.241034] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2000.242620] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2000.244110] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2000.245607] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.247090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.248590] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2000.252894] FAULT_INJECTION: forcing a failure.
[ 2000.252894] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.255541] CPU: 1 PID: 56038 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2000.257006] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.258791] Call Trace:
[ 2000.259339]  dump_stack+0x107/0x167
[ 2000.260101]  should_fail.cold+0x5/0xa
[ 2000.260893]  ? copy_process+0x3301/0x78b0
[ 2000.261782]  should_failslab+0x5/0x20
[ 2000.262578]  kmem_cache_alloc_node+0x55/0x330
[ 2000.263527]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.264625]  copy_process+0x3301/0x78b0
[ 2000.265469]  ? __lock_acquire+0xbb1/0x5b00
[ 2000.266377]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.267248]  ? __cleanup_sighand+0xb0/0xb0
[ 2000.268135]  ? lock_acquire+0x197/0x470
[ 2000.268977]  ? find_held_lock+0x2c/0x110
[ 2000.269833]  kernel_clone+0xe7/0x980
[ 2000.270609]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.271472]  ? find_held_lock+0x2c/0x110
[ 2000.272317]  ? create_io_thread+0xf0/0xf0
[ 2000.273189]  ? ksys_write+0x12d/0x260
[ 2000.273985]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2000.274998]  __do_sys_fork+0x8a/0xc0
[ 2000.275777]  ? kernel_thread+0xf0/0xf0
[ 2000.276608]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.277709]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.278779]  ? trace_hardirqs_on+0x5b/0x180
[ 2000.279690]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.280783]  do_syscall_64+0x33/0x40
[ 2000.281568]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.282666] RIP: 0033:0x7f46dde30b19
[ 2000.283441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.287317] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2000.288907] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2000.290406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2000.291897] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.293404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.294889] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:12:49 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 2)

07:12:49 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 2)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:12:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 2)

07:12:49 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 2)

[ 2000.512913] FAULT_INJECTION: forcing a failure.
[ 2000.512913] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.515358] CPU: 0 PID: 56155 Comm: syz-executor.1 Not tainted 5.10.239 #1
[ 2000.516814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.518580] Call Trace:
[ 2000.519138]  dump_stack+0x107/0x167
[ 2000.519906]  should_fail.cold+0x5/0xa
[ 2000.520712]  ? create_object.isra.0+0x3a/0xa20
[ 2000.521714]  should_failslab+0x5/0x20
[ 2000.522520]  kmem_cache_alloc+0x5b/0x310
[ 2000.523390]  create_object.isra.0+0x3a/0xa20
[ 2000.524322]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2000.525413]  __kmalloc+0x16e/0x390
[ 2000.526174]  kernfs_fop_write_iter+0x235/0x510
[ 2000.527144]  ? iov_iter_init+0x3c/0x130
[ 2000.527991]  new_sync_write+0x42c/0x660
[ 2000.528831]  ? new_sync_read+0x6f0/0x6f0
[ 2000.529697]  ? ksys_write+0x12d/0x260
[ 2000.530513]  ? lock_release+0x680/0x680
[ 2000.531365]  ? avc_policy_seqno+0x9/0x70
[ 2000.532222]  ? selinux_file_permission+0x92/0x520
[ 2000.533266]  vfs_write+0x7c0/0xb10
[ 2000.534032]  ksys_write+0x12d/0x260
[ 2000.534805]  ? __ia32_sys_read+0xb0/0xb0
[ 2000.535668]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.536776]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.537889]  do_syscall_64+0x33/0x40
[ 2000.538676]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.539760] RIP: 0033:0x7f07ed870b19
[ 2000.540544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.544445] RSP: 002b:00007f07eade6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2000.546095] RAX: ffffffffffffffda RBX: 00007f07ed983f60 RCX: 00007f07ed870b19
[ 2000.546917] FAULT_INJECTION: forcing a failure.
[ 2000.546917] name failslab, interval 1, probability 0, space 0, times 0
[ 2000.547607] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2000.547645] RBP: 00007f07eade61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.547655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.547676] R13: 00007ffca4e3476f R14: 00007f07eade6300 R15: 0000000000022000
[ 2000.556113] CPU: 1 PID: 56156 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2000.556952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2000.557596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.557603] Call Trace:
[ 2000.557633]  dump_stack+0x107/0x167
[ 2000.557658]  should_fail.cold+0x5/0xa
[ 2000.559148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2000.560866]  ? create_object.isra.0+0x3a/0xa20
[ 2000.560892]  should_failslab+0x5/0x20
[ 2000.561633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2000.562181]  kmem_cache_alloc+0x5b/0x310
[ 2000.568162]  create_object.isra.0+0x3a/0xa20
[ 2000.569080]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2000.570152]  kmem_cache_alloc_node+0x169/0x330
[ 2000.571112]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.572232]  copy_process+0x3301/0x78b0
[ 2000.573077]  ? __lock_acquire+0xbb1/0x5b00
[ 2000.573968]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.574835]  ? __cleanup_sighand+0xb0/0xb0
[ 2000.575745]  ? lock_acquire+0x197/0x470
[ 2000.576591]  ? find_held_lock+0x2c/0x110
[ 2000.577456]  kernel_clone+0xe7/0x980
[ 2000.578237]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.579093]  ? find_held_lock+0x2c/0x110
[ 2000.579951]  ? create_io_thread+0xf0/0xf0
[ 2000.580822]  ? ksys_write+0x12d/0x260
[ 2000.581640]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2000.582651]  __do_sys_fork+0x8a/0xc0
[ 2000.583422]  ? kernel_thread+0xf0/0xf0
[ 2000.584250]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.585354]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.586436]  ? trace_hardirqs_on+0x5b/0x180
[ 2000.587337]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.588412]  do_syscall_64+0x33/0x40
[ 2000.589200]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.590269] RIP: 0033:0x7f46dde30b19
[ 2000.591045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.594923] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2000.596513] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2000.598009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2000.599499] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.600994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.602482] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2000.615835] FAULT_INJECTION: forcing a failure.
[ 2000.615835] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2000.618539] CPU: 1 PID: 56159 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2000.619980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2000.621729] Call Trace:
[ 2000.622286]  dump_stack+0x107/0x167
[ 2000.623042]  should_fail.cold+0x5/0xa
[ 2000.623837]  _copy_from_user+0x2e/0x1b0
[ 2000.624667]  iovec_from_user+0x141/0x400
[ 2000.625526]  __import_iovec+0x67/0x590
[ 2000.626338]  ? __ia32_sys_shutdown+0x80/0x80
[ 2000.627252]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.628357]  import_iovec+0x83/0xb0
[ 2000.629121]  sendmsg_copy_msghdr+0x131/0x160
[ 2000.630044]  ? do_recvmmsg+0x6d0/0x6d0
[ 2000.630864]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.632023]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2000.633137]  ___sys_sendmsg+0xc6/0x170
07:12:49 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2000.633950]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2000.635076]  ? __fget_files+0x2cf/0x520
[ 2000.635907]  ? lock_downgrade+0x6d0/0x6d0
[ 2000.636772]  ? find_held_lock+0x2c/0x110
[ 2000.637640]  ? __fget_files+0x2f8/0x520
[ 2000.638482]  ? __fget_light+0xea/0x290
[ 2000.639310]  __sys_sendmsg+0xe5/0x1b0
[ 2000.640109]  ? __sys_sendmsg_sock+0x40/0x40
[ 2000.641020]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2000.641990]  ? fput_many+0x2f/0x1a0
[ 2000.642758]  ? ksys_write+0x1a9/0x260
[ 2000.643564]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2000.644656]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2000.645738]  ? trace_hardirqs_on+0x5b/0x180
[ 2000.646645]  do_syscall_64+0x33/0x40
[ 2000.647423]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2000.648486] RIP: 0033:0x7f5927a91b19
[ 2000.649264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2000.653139] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2000.654732] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2000.656242] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2000.657739] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2000.659245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2000.660732] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2000.704485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2017.159410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2017.162865] FAULT_INJECTION: forcing a failure.
[ 2017.162865] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.165696] CPU: 0 PID: 56274 Comm: syz-executor.0 Not tainted 5.10.239 #1
[ 2017.167172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.168928] Call Trace:
[ 2017.168955]  dump_stack+0x107/0x167
[ 2017.168976]  should_fail.cold+0x5/0xa
[ 2017.169009]  ? kernfs_fop_write_iter+0x235/0x510
[ 2017.170607] FAULT_INJECTION: forcing a failure.
[ 2017.170607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2017.171043]  should_failslab+0x5/0x20
[ 2017.171061]  __kmalloc+0x72/0x390
[ 2017.171085]  kernfs_fop_write_iter+0x235/0x510
[ 2017.176707]  ? iov_iter_init+0x3c/0x130
[ 2017.177560]  new_sync_write+0x42c/0x660
[ 2017.178399]  ? new_sync_read+0x6f0/0x6f0
[ 2017.179258]  ? ksys_write+0x12d/0x260
[ 2017.180062]  ? lock_release+0x680/0x680
[ 2017.180900]  ? avc_policy_seqno+0x9/0x70
[ 2017.181771]  ? selinux_file_permission+0x92/0x520
[ 2017.182803]  vfs_write+0x7c0/0xb10
[ 2017.183560]  ksys_write+0x12d/0x260
[ 2017.184337]  ? __ia32_sys_read+0xb0/0xb0
[ 2017.185209]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.186322]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.187415]  do_syscall_64+0x33/0x40
[ 2017.188201]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.189286] RIP: 0033:0x7fa21827cb19
[ 2017.190072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.193963] RSP: 002b:00007fa2157f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2017.195568] RAX: ffffffffffffffda RBX: 00007fa21838ff60 RCX: 00007fa21827cb19
[ 2017.197070] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2017.198583] RBP: 00007fa2157f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.200090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.201601] R13: 00007ffc1045b92f R14: 00007fa2157f2300 R15: 0000000000022000
[ 2017.203136] CPU: 1 PID: 56283 Comm: syz-executor.1 Not tainted 5.10.239 #1
[ 2017.204176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2017.204321] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.204326] Call Trace:
[ 2017.204347]  dump_stack+0x107/0x167
[ 2017.204364]  should_fail.cold+0x5/0xa
[ 2017.204384]  _copy_from_iter+0x202/0xe80
[ 2017.204403]  ? __virt_addr_valid+0x170/0x5d0
[ 2017.204425]  ? __check_object_size+0x319/0x440
[ 2017.210974] FAULT_INJECTION: forcing a failure.
[ 2017.210974] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 2017.211321]  kernfs_fop_write_iter+0x194/0x510
[ 2017.211334]  ? iov_iter_init+0x3c/0x130
[ 2017.211351]  new_sync_write+0x42c/0x660
[ 2017.211367]  ? new_sync_read+0x6f0/0x6f0
[ 2017.211382]  ? ksys_write+0x12d/0x260
[ 2017.211400]  ? lock_release+0x680/0x680
[ 2017.211414]  ? avc_policy_seqno+0x9/0x70
[ 2017.211428]  ? selinux_file_permission+0x92/0x520
[ 2017.211456]  vfs_write+0x7c0/0xb10
[ 2017.219946]  ksys_write+0x12d/0x260
[ 2017.220550]  ? __ia32_sys_read+0xb0/0xb0
[ 2017.221233]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.222105]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.222957]  do_syscall_64+0x33/0x40
[ 2017.223579]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.224421] RIP: 0033:0x7f07ed870b19
[ 2017.225025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.228066] RSP: 002b:00007f07eade6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2017.229354] RAX: ffffffffffffffda RBX: 00007f07ed983f60 RCX: 00007f07ed870b19
[ 2017.230536] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2017.231726] RBP: 00007f07eade61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.232903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.234084] R13: 00007ffca4e3476f R14: 00007f07eade6300 R15: 0000000000022000
[ 2017.235309] CPU: 0 PID: 56269 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2017.236788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.238858] Call Trace:
[ 2017.239419]  dump_stack+0x107/0x167
[ 2017.240203]  should_fail.cold+0x5/0xa
[ 2017.241021]  __alloc_pages_nodemask+0x182/0x600
[ 2017.242024]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.242902]  ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200
[ 2017.244168]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2017.245269]  ? kmem_cache_alloc_node+0x2bc/0x330
[ 2017.246265]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.247372]  copy_process+0x62b/0x78b0
[ 2017.248201]  ? __lock_acquire+0xbb1/0x5b00
[ 2017.249107]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.249993]  ? __cleanup_sighand+0xb0/0xb0
[ 2017.250895]  ? lock_acquire+0x197/0x470
[ 2017.251745]  ? find_held_lock+0x2c/0x110
[ 2017.252605]  kernel_clone+0xe7/0x980
[ 2017.253400]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.254286]  ? find_held_lock+0x2c/0x110
[ 2017.255146]  ? create_io_thread+0xf0/0xf0
[ 2017.256020]  ? ksys_write+0x12d/0x260
[ 2017.256825]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2017.257864]  __do_sys_fork+0x8a/0xc0
[ 2017.258647]  ? kernel_thread+0xf0/0xf0
[ 2017.259483]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.260598]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.261698]  ? trace_hardirqs_on+0x5b/0x180
[ 2017.262607]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.263697]  do_syscall_64+0x33/0x40
[ 2017.264487]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.265581] RIP: 0033:0x7f46dde30b19
[ 2017.266365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.270259] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2017.271858] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2017.273371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2017.274871] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.276375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.277886] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:13:05 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:13:05 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 3)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:13:05 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:13:05 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:13:05 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:13:05 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 1)

07:13:05 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 3)

07:13:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 3)

[ 2017.300189] FAULT_INJECTION: forcing a failure.
[ 2017.300189] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.302263] CPU: 1 PID: 56282 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2017.303391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.304724] Call Trace:
[ 2017.305164]  dump_stack+0x107/0x167
[ 2017.305773]  should_fail.cold+0x5/0xa
[ 2017.306390]  ? __alloc_skb+0x6d/0x5b0
[ 2017.307019]  should_failslab+0x5/0x20
[ 2017.307634]  kmem_cache_alloc_node+0x55/0x330
[ 2017.308375]  __alloc_skb+0x6d/0x5b0
[ 2017.308954]  netlink_sendmsg+0x998/0xe00
[ 2017.309595]  ? netlink_unicast+0x800/0x800
[ 2017.310279]  ? netlink_unicast+0x800/0x800
[ 2017.310955]  __sock_sendmsg+0x154/0x190
[ 2017.311582]  ____sys_sendmsg+0x70d/0x870
[ 2017.312245]  ? sock_write_iter+0x3d0/0x3d0
[ 2017.312919]  ? do_recvmmsg+0x6d0/0x6d0
[ 2017.313554]  ___sys_sendmsg+0xf3/0x170
[ 2017.314179]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2017.314915]  ? __fget_files+0x2cf/0x520
[ 2017.315555]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.316217]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2017.317073]  ? trace_hardirqs_on+0x5b/0x180
[ 2017.317757]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2017.318627]  ? __fget_files+0x2f8/0x520
[ 2017.319255]  ? __fget_light+0xea/0x290
[ 2017.319888]  __sys_sendmsg+0xe5/0x1b0
[ 2017.320500]  ? __sys_sendmsg_sock+0x40/0x40
[ 2017.321209]  ? io_schedule_timeout+0x140/0x140
[ 2017.321928]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.322735]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.323549]  ? trace_hardirqs_on+0x5b/0x180
[ 2017.324239]  do_syscall_64+0x33/0x40
[ 2017.324825]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.325599] RIP: 0033:0x7f5927a91b19
[ 2017.326163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.328961] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2017.330139] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2017.331247] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2017.332332] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.333439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.334564] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
07:13:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 4)

07:13:06 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 2)

[ 2017.339405] FAULT_INJECTION: forcing a failure.
[ 2017.339405] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2017.342353] CPU: 0 PID: 56389 Comm: syz-executor.1 Not tainted 5.10.239 #1
[ 2017.343829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.345590] Call Trace:
[ 2017.346158]  dump_stack+0x107/0x167
[ 2017.346929]  should_fail.cold+0x5/0xa
[ 2017.347745]  _copy_to_user+0x2e/0x180
[ 2017.348561]  simple_read_from_buffer+0xcc/0x160
[ 2017.349567]  proc_fail_nth_read+0x198/0x230
[ 2017.350488]  ? proc_sessionid_read+0x230/0x230
[ 2017.351459]  ? security_file_permission+0xb1/0xe0
[ 2017.352487]  ? proc_sessionid_read+0x230/0x230
[ 2017.353463]  vfs_read+0x228/0x620
[ 2017.354204]  ksys_read+0x12d/0x260
[ 2017.354961]  ? vfs_write+0xb10/0xb10
[ 2017.355757]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.356868]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.357967]  do_syscall_64+0x33/0x40
[ 2017.358756]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.359837] RIP: 0033:0x7f07ed82369c
[ 2017.360623] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2017.364520] RSP: 002b:00007f07eade6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2017.366374] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007f07ed82369c
[ 2017.368243] RDX: 000000000000000f RSI: 00007f07eade61e0 RDI: 0000000000000004
[ 2017.369802] RBP: 00007f07eade61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.371315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.372831] R13: 00007ffca4e3476f R14: 00007f07eade6300 R15: 0000000000022000
07:13:06 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2017.457683] FAULT_INJECTION: forcing a failure.
[ 2017.457683] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.459421] CPU: 1 PID: 56395 Comm: syz-executor.0 Not tainted 5.10.239 #1
[ 2017.460382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.461579] Call Trace:
[ 2017.461960]  dump_stack+0x107/0x167
[ 2017.462468]  should_fail.cold+0x5/0xa
[ 2017.463001]  ? create_object.isra.0+0x3a/0xa20
[ 2017.463645]  should_failslab+0x5/0x20
[ 2017.464191]  kmem_cache_alloc+0x5b/0x310
[ 2017.464785]  create_object.isra.0+0x3a/0xa20
[ 2017.465399]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2017.466127]  __kmalloc+0x16e/0x390
[ 2017.466633]  kernfs_fop_write_iter+0x235/0x510
[ 2017.467267]  ? iov_iter_init+0x3c/0x130
[ 2017.467820]  new_sync_write+0x42c/0x660
[ 2017.468405]  ? new_sync_read+0x6f0/0x6f0
[ 2017.468967]  ? ksys_write+0x12d/0x260
[ 2017.469509]  ? lock_release+0x680/0x680
[ 2017.470072]  ? avc_policy_seqno+0x9/0x70
[ 2017.470640]  ? selinux_file_permission+0x92/0x520
[ 2017.471331]  vfs_write+0x7c0/0xb10
[ 2017.471837]  ksys_write+0x12d/0x260
[ 2017.472342]  ? __ia32_sys_read+0xb0/0xb0
[ 2017.472920]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.473667]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.474391]  do_syscall_64+0x33/0x40
[ 2017.474908]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.475623] RIP: 0033:0x7fa21827cb19
[ 2017.476155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.478730] RSP: 002b:00007fa2157f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2017.479784] RAX: ffffffffffffffda RBX: 00007fa21838ff60 RCX: 00007fa21827cb19
[ 2017.480768] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2017.481781] RBP: 00007fa2157f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.482783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.483761] R13: 00007ffc1045b92f R14: 00007fa2157f2300 R15: 0000000000022000
07:13:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:13:06 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 4)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2017.640152] FAULT_INJECTION: forcing a failure.
[ 2017.640152] name failslab, interval 1, probability 0, space 0, times 0
[ 2017.641711] CPU: 1 PID: 56536 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2017.642598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2017.643657] Call Trace:
[ 2017.643989]  dump_stack+0x107/0x167
[ 2017.644439]  should_fail.cold+0x5/0xa
[ 2017.644908]  ? prepare_creds+0x25/0x5e0
[ 2017.645401]  should_failslab+0x5/0x20
[ 2017.645875]  kmem_cache_alloc+0x5b/0x310
[ 2017.646391]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.646910]  prepare_creds+0x25/0x5e0
[ 2017.647375]  copy_creds+0x72/0x580
[ 2017.647839]  copy_process+0xfef/0x78b0
[ 2017.648321]  ? __lock_acquire+0xbb1/0x5b00
[ 2017.648844]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.649384]  ? __cleanup_sighand+0xb0/0xb0
[ 2017.649904]  ? lock_acquire+0x197/0x470
[ 2017.650399]  ? find_held_lock+0x2c/0x110
[ 2017.650896]  kernel_clone+0xe7/0x980
[ 2017.651356]  ? lock_downgrade+0x6d0/0x6d0
[ 2017.651861]  ? find_held_lock+0x2c/0x110
[ 2017.652360]  ? create_io_thread+0xf0/0xf0
[ 2017.652887]  ? ksys_write+0x12d/0x260
[ 2017.653378]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2017.653968]  __do_sys_fork+0x8a/0xc0
[ 2017.654429]  ? kernel_thread+0xf0/0xf0
[ 2017.654914]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2017.655564]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.656199]  ? trace_hardirqs_on+0x5b/0x180
[ 2017.656756]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2017.657409]  do_syscall_64+0x33/0x40
[ 2017.657866]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2017.658489] RIP: 0033:0x7f46dde30b19
[ 2017.658943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2017.661184] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2017.662113] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2017.662993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2017.663863] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2017.664729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2017.665597] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2017.675709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2017.677290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2017.678903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:13:22 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 4)

07:13:22 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:13:22 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 3)

07:13:22 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 5)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:13:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x40a202, 0xc)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f0000000040)=0xffff, 0x4)

07:13:22 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:13:22 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:13:22 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2034.084882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2034.103567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2034.108831] FAULT_INJECTION: forcing a failure.
[ 2034.108831] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2034.111536] CPU: 0 PID: 56620 Comm: syz-executor.0 Not tainted 5.10.239 #1
[ 2034.112929] FAULT_INJECTION: forcing a failure.
[ 2034.112929] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.113051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.113065] Call Trace:
[ 2034.117895]  dump_stack+0x107/0x167
[ 2034.118687]  should_fail.cold+0x5/0xa
[ 2034.119524]  _copy_from_iter+0x202/0xe80
[ 2034.120407]  ? __virt_addr_valid+0x170/0x5d0
[ 2034.121367]  ? __check_object_size+0x319/0x440
[ 2034.122363]  kernfs_fop_write_iter+0x194/0x510
[ 2034.123351]  ? iov_iter_init+0x3c/0x130
[ 2034.124215]  new_sync_write+0x42c/0x660
[ 2034.125081]  ? new_sync_read+0x6f0/0x6f0
[ 2034.125977]  ? ksys_write+0x12d/0x260
[ 2034.126813]  ? lock_release+0x680/0x680
[ 2034.127678]  ? avc_policy_seqno+0x9/0x70
[ 2034.128561]  ? selinux_file_permission+0x92/0x520
[ 2034.129631]  vfs_write+0x7c0/0xb10
[ 2034.130410]  ksys_write+0x12d/0x260
[ 2034.131193]  ? __ia32_sys_read+0xb0/0xb0
[ 2034.132078]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.133217]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.134354]  do_syscall_64+0x33/0x40
[ 2034.135159]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2034.136268] RIP: 0033:0x7fa21827cb19
[ 2034.137070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.140989] RSP: 002b:00007fa2157f2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2034.142608] RAX: ffffffffffffffda RBX: 00007fa21838ff60 RCX: 00007fa21827cb19
[ 2034.144119] RDX: 0000000000000012 RSI: 00000000200000c0 RDI: 0000000000000003
[ 2034.145643] RBP: 00007fa2157f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.147144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.148656] R13: 00007ffc1045b92f R14: 00007fa2157f2300 R15: 0000000000022000
[ 2034.150229] CPU: 1 PID: 56618 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2034.151704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.153476] Call Trace:
[ 2034.154038]  dump_stack+0x107/0x167
[ 2034.154816]  should_fail.cold+0x5/0xa
[ 2034.155635]  ? create_object.isra.0+0x3a/0xa20
[ 2034.156607]  should_failslab+0x5/0x20
[ 2034.157428]  kmem_cache_alloc+0x5b/0x310
[ 2034.158305]  create_object.isra.0+0x3a/0xa20
[ 2034.159232]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2034.160324]  kmem_cache_alloc_node+0x169/0x330
[ 2034.161304]  __alloc_skb+0x6d/0x5b0
[ 2034.162091]  netlink_sendmsg+0x998/0xe00
[ 2034.162976]  ? netlink_unicast+0x800/0x800
[ 2034.163889]  ? netlink_unicast+0x800/0x800
[ 2034.164794]  __sock_sendmsg+0x154/0x190
[ 2034.165653]  ____sys_sendmsg+0x70d/0x870
[ 2034.166535]  ? sock_write_iter+0x3d0/0x3d0
[ 2034.167430]  ? do_recvmmsg+0x6d0/0x6d0
[ 2034.168264]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.169150]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2034.170269]  ___sys_sendmsg+0xf3/0x170
[ 2034.171108]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2034.172092]  ? __fget_files+0x2cf/0x520
[ 2034.172930]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.173819]  ? find_held_lock+0x2c/0x110
[ 2034.174697]  ? __fget_files+0x2f8/0x520
[ 2034.175549]  ? __fget_light+0xea/0x290
[ 2034.176378]  __sys_sendmsg+0xe5/0x1b0
[ 2034.177203]  ? __sys_sendmsg_sock+0x40/0x40
[ 2034.178118]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2034.179128]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.180249]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.181350]  ? trace_hardirqs_on+0x5b/0x180
[ 2034.182276]  do_syscall_64+0x33/0x40
[ 2034.183077]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2034.184166] RIP: 0033:0x7f5927a91b19
[ 2034.184951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.188859] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2034.190490] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2034.192029] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2034.193566] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.195090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.196602] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2034.220905] FAULT_INJECTION: forcing a failure.
[ 2034.220905] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.223698] CPU: 1 PID: 56621 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2034.225183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.226974] Call Trace:
[ 2034.227545]  dump_stack+0x107/0x167
[ 2034.228332]  should_fail.cold+0x5/0xa
[ 2034.229149]  ? create_object.isra.0+0x3a/0xa20
[ 2034.230149]  should_failslab+0x5/0x20
[ 2034.230967]  kmem_cache_alloc+0x5b/0x310
[ 2034.231847]  create_object.isra.0+0x3a/0xa20
[ 2034.232784]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2034.233881]  kmem_cache_alloc+0x159/0x310
[ 2034.234783]  prepare_creds+0x25/0x5e0
[ 2034.235604]  copy_creds+0x72/0x580
[ 2034.236371]  copy_process+0xfef/0x78b0
[ 2034.237214]  ? __lock_acquire+0xbb1/0x5b00
[ 2034.238139]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.239035]  ? __cleanup_sighand+0xb0/0xb0
[ 2034.239961]  ? lock_acquire+0x197/0x470
[ 2034.240817]  ? find_held_lock+0x2c/0x110
[ 2034.241696]  kernel_clone+0xe7/0x980
[ 2034.242491]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.243382]  ? find_held_lock+0x2c/0x110
[ 2034.244245]  ? create_io_thread+0xf0/0xf0
[ 2034.245131]  ? ksys_write+0x12d/0x260
[ 2034.245964]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2034.247007]  __do_sys_fork+0x8a/0xc0
[ 2034.247800]  ? kernel_thread+0xf0/0xf0
[ 2034.248631]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.249753]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.250857]  ? trace_hardirqs_on+0x5b/0x180
[ 2034.251776]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.252866]  do_syscall_64+0x33/0x40
[ 2034.253668]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2034.254754] RIP: 0033:0x7f46dde30b19
[ 2034.255541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.259460] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2034.261068] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2034.262595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2034.264104] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.265639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.267141] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:13:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x0, {0x20}}, 0x14)
write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x800, 0x40000000, 0x0, 0x0, 0x88, 0x0, 0x849}}, 0x43)
renameat(r1, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', r0, &(0x7f0000000080)='./cgroup/cgroup.procs\x00')
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f00000001c0)={{r2}, "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"})

07:13:23 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) (fail_nth: 4)

07:13:23 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2034.463711] FAULT_INJECTION: forcing a failure.
[ 2034.463711] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2034.466279] CPU: 1 PID: 56849 Comm: syz-executor.0 Not tainted 5.10.239 #1
[ 2034.467748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.469516] Call Trace:
[ 2034.470072]  dump_stack+0x107/0x167
[ 2034.470874]  should_fail.cold+0x5/0xa
[ 2034.471716]  _copy_to_user+0x2e/0x180
[ 2034.472556]  simple_read_from_buffer+0xcc/0x160
[ 2034.473587]  proc_fail_nth_read+0x198/0x230
[ 2034.474538]  ? proc_sessionid_read+0x230/0x230
[ 2034.475536]  ? security_file_permission+0xb1/0xe0
[ 2034.476596]  ? proc_sessionid_read+0x230/0x230
[ 2034.477608]  vfs_read+0x228/0x620
[ 2034.478372]  ksys_read+0x12d/0x260
[ 2034.479142]  ? vfs_write+0xb10/0xb10
[ 2034.479969]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.481117]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.482264]  do_syscall_64+0x33/0x40
[ 2034.483077]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2034.484195] RIP: 0033:0x7fa21822f69c
[ 2034.485009] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2034.489051] RSP: 002b:00007fa2157f2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2034.490735] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007fa21822f69c
[ 2034.492300] RDX: 000000000000000f RSI: 00007fa2157f21e0 RDI: 0000000000000004
[ 2034.493869] RBP: 00007fa2157f21d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.495440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.496999] R13: 00007ffc1045b92f R14: 00007fa2157f2300 R15: 0000000000022000
07:13:23 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 6)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:13:23 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2034.635695] FAULT_INJECTION: forcing a failure.
[ 2034.635695] name failslab, interval 1, probability 0, space 0, times 0
[ 2034.638655] CPU: 0 PID: 57036 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2034.640318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2034.642333] Call Trace:
[ 2034.642986]  dump_stack+0x107/0x167
[ 2034.643867]  should_fail.cold+0x5/0xa
[ 2034.644794]  ? security_prepare_creds+0x112/0x190
[ 2034.645984]  should_failslab+0x5/0x20
[ 2034.646916]  __kmalloc+0x72/0x390
[ 2034.647774]  security_prepare_creds+0x112/0x190
[ 2034.648907]  prepare_creds+0x452/0x5e0
[ 2034.649865]  copy_creds+0x72/0x580
[ 2034.650729]  copy_process+0xfef/0x78b0
[ 2034.651694]  ? __lock_acquire+0xbb1/0x5b00
[ 2034.652742]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.653774]  ? __cleanup_sighand+0xb0/0xb0
[ 2034.654819]  ? lock_acquire+0x197/0x470
[ 2034.655796]  ? find_held_lock+0x2c/0x110
[ 2034.656796]  kernel_clone+0xe7/0x980
[ 2034.657717]  ? lock_downgrade+0x6d0/0x6d0
[ 2034.658750]  ? find_held_lock+0x2c/0x110
[ 2034.659774]  ? create_io_thread+0xf0/0xf0
[ 2034.660820]  ? ksys_write+0x12d/0x260
[ 2034.661561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2034.661791]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2034.661821]  __do_sys_fork+0x8a/0xc0
[ 2034.665765]  ? kernel_thread+0xf0/0xf0
[ 2034.666772]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2034.668116]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.669442]  ? trace_hardirqs_on+0x5b/0x180
[ 2034.670564]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2034.671862]  do_syscall_64+0x33/0x40
[ 2034.672818]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2034.674104] RIP: 0033:0x7f46dde30b19
[ 2034.674895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2034.678799] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2034.680428] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2034.681955] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2034.683475] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2034.685007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2034.686545] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:13:23 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 2034.745118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2034.746714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2034.753583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:13:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:13:41 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:13:41 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:13:41 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 7)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:13:41 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 5)

07:13:41 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
getpgrp(0x0)
r1 = getpgrp(0x0)
openat(r0, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x8000, 0x1)
pidfd_open(r1, 0x0)
r2 = getpgrp(0x0)
pidfd_open(r2, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r3, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x46f84f89dd7c81fd)

07:13:41 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:13:41 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2052.547942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2052.557690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2052.582127] FAULT_INJECTION: forcing a failure.
[ 2052.582127] name failslab, interval 1, probability 0, space 0, times 0
[ 2052.585057] CPU: 1 PID: 57258 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2052.586810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2052.588939] Call Trace:
[ 2052.589624]  dump_stack+0x107/0x167
[ 2052.590566]  should_fail.cold+0x5/0xa
[ 2052.591548]  should_failslab+0x5/0x20
[ 2052.592528]  __kmalloc_node_track_caller+0x74/0x3b0
[ 2052.593808]  ? netlink_sendmsg+0x998/0xe00
[ 2052.594900]  __alloc_skb+0xb1/0x5b0
[ 2052.595853]  netlink_sendmsg+0x998/0xe00
[ 2052.596903]  ? netlink_unicast+0x800/0x800
[ 2052.597984]  ? netlink_unicast+0x800/0x800
[ 2052.598946]  __sock_sendmsg+0x154/0x190
[ 2052.599846]  ____sys_sendmsg+0x70d/0x870
[ 2052.600771]  ? sock_write_iter+0x3d0/0x3d0
[ 2052.601735]  ? do_recvmmsg+0x6d0/0x6d0
[ 2052.602615]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.603551]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2052.604737]  ___sys_sendmsg+0xf3/0x170
[ 2052.605625]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2052.606667]  ? __fget_files+0x2cf/0x520
[ 2052.607556]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.608495]  ? find_held_lock+0x2c/0x110
[ 2052.609422]  ? __fget_files+0x2f8/0x520
[ 2052.610345]  ? __fget_light+0xea/0x290
[ 2052.611226]  __sys_sendmsg+0xe5/0x1b0
[ 2052.612082]  ? __sys_sendmsg_sock+0x40/0x40
[ 2052.613073]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2052.614141]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2052.615332]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2052.616480]  ? trace_hardirqs_on+0x5b/0x180
[ 2052.617454]  do_syscall_64+0x33/0x40
[ 2052.618296]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2052.619446] RIP: 0033:0x7f5927a91b19
[ 2052.620284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2052.624423] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2052.626133] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2052.627733] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2052.629352] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2052.630967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2052.632582] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2052.650192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2052.651912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2052.653649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:13:41 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:13:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0xfdef)

[ 2052.674026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2052.685826] FAULT_INJECTION: forcing a failure.
[ 2052.685826] name failslab, interval 1, probability 0, space 0, times 0
[ 2052.689085] CPU: 1 PID: 57263 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2052.690658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2052.692520] Call Trace:
[ 2052.693117]  dump_stack+0x107/0x167
[ 2052.693945]  should_fail.cold+0x5/0xa
[ 2052.694806]  ? create_object.isra.0+0x3a/0xa20
[ 2052.695836]  should_failslab+0x5/0x20
[ 2052.696700]  kmem_cache_alloc+0x5b/0x310
[ 2052.697631]  create_object.isra.0+0x3a/0xa20
[ 2052.698616]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2052.699766]  __kmalloc+0x16e/0x390
[ 2052.700576]  security_prepare_creds+0x112/0x190
[ 2052.701640]  prepare_creds+0x452/0x5e0
[ 2052.702513]  copy_creds+0x72/0x580
[ 2052.703318]  copy_process+0xfef/0x78b0
[ 2052.704211]  ? __lock_acquire+0xbb1/0x5b00
[ 2052.705175]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.706122]  ? __cleanup_sighand+0xb0/0xb0
[ 2052.707086]  ? lock_acquire+0x197/0x470
[ 2052.707996]  ? find_held_lock+0x2c/0x110
[ 2052.708913]  kernel_clone+0xe7/0x980
07:13:41 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4781cc61c0000"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2052.709764]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.710880]  ? find_held_lock+0x2c/0x110
[ 2052.711808]  ? create_io_thread+0xf0/0xf0
[ 2052.712747]  ? ksys_write+0x12d/0x260
[ 2052.713626]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2052.714723]  __do_sys_fork+0x8a/0xc0
[ 2052.715576]  ? kernel_thread+0xf0/0xf0
[ 2052.716472]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2052.717669]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2052.718841]  ? trace_hardirqs_on+0x5b/0x180
[ 2052.719824]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2052.720989]  do_syscall_64+0x33/0x40
[ 2052.721842]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2052.723002] RIP: 0033:0x7f46dde30b19
[ 2052.723840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2052.728023] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2052.729755] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2052.731370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
07:13:41 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x200000d2)

[ 2052.732995] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2052.734718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2052.736335] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:13:41 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:13:41 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 6)

[ 2052.766733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:13:41 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2052.828923] FAULT_INJECTION: forcing a failure.
[ 2052.828923] name failslab, interval 1, probability 0, space 0, times 0
[ 2052.830429] CPU: 0 PID: 57556 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2052.831216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2052.832160] Call Trace:
[ 2052.832469]  dump_stack+0x107/0x167
[ 2052.832884]  should_fail.cold+0x5/0xa
[ 2052.833324]  ? create_object.isra.0+0x3a/0xa20
[ 2052.833865]  should_failslab+0x5/0x20
[ 2052.834304]  kmem_cache_alloc+0x5b/0x310
[ 2052.834769]  create_object.isra.0+0x3a/0xa20
[ 2052.835267]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2052.835846]  __kmalloc_node_track_caller+0x1a6/0x3b0
[ 2052.836423]  ? netlink_sendmsg+0x998/0xe00
[ 2052.836905]  __alloc_skb+0xb1/0x5b0
[ 2052.837322]  netlink_sendmsg+0x998/0xe00
[ 2052.837803]  ? netlink_unicast+0x800/0x800
[ 2052.838288]  ? netlink_unicast+0x800/0x800
[ 2052.838769]  __sock_sendmsg+0x154/0x190
[ 2052.839228]  ____sys_sendmsg+0x70d/0x870
[ 2052.839696]  ? sock_write_iter+0x3d0/0x3d0
[ 2052.840184]  ? do_recvmmsg+0x6d0/0x6d0
[ 2052.840631]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.841101]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2052.841720]  ___sys_sendmsg+0xf3/0x170
[ 2052.842165]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2052.842692]  ? __fget_files+0x2cf/0x520
[ 2052.843143]  ? lock_downgrade+0x6d0/0x6d0
[ 2052.843617]  ? find_held_lock+0x2c/0x110
[ 2052.844083]  ? __fget_files+0x2f8/0x520
[ 2052.844542]  ? __fget_light+0xea/0x290
[ 2052.844990]  __sys_sendmsg+0xe5/0x1b0
[ 2052.845423]  ? __sys_sendmsg_sock+0x40/0x40
[ 2052.845944]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2052.846479]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2052.847078]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2052.847666]  ? trace_hardirqs_on+0x5b/0x180
[ 2052.848157]  do_syscall_64+0x33/0x40
[ 2052.848582]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2052.849164] RIP: 0033:0x7f5927a91b19
[ 2052.849604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2052.851692] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2052.852560] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2052.853368] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2052.854198] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2052.855007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2052.855827] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2052.950372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2052.964916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2052.966411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2052.967996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:13:58 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0xfffffdef)

07:13:58 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:13:58 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 8)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:13:58 executing program 1:
setitimer(0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f0000000100))
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x1, 0x44)

07:13:58 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 7)

07:13:58 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:13:58 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:13:58 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 2069.814777] FAULT_INJECTION: forcing a failure.
[ 2069.814777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2069.817151] CPU: 1 PID: 57697 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2069.818432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2069.819910] Call Trace:
[ 2069.820386]  dump_stack+0x107/0x167
[ 2069.821054]  should_fail.cold+0x5/0xa
[ 2069.821758]  _copy_from_iter_full+0x201/0xa60
[ 2069.822570]  ? __virt_addr_valid+0x170/0x5d0
[ 2069.823370]  ? __check_object_size+0x319/0x440
[ 2069.824234]  netlink_sendmsg+0x879/0xe00
[ 2069.824963]  ? netlink_unicast+0x800/0x800
[ 2069.825730]  ? netlink_unicast+0x800/0x800
[ 2069.826481]  __sock_sendmsg+0x154/0x190
[ 2069.827186]  ____sys_sendmsg+0x70d/0x870
[ 2069.827925]  ? sock_write_iter+0x3d0/0x3d0
[ 2069.828694]  ? do_recvmmsg+0x6d0/0x6d0
[ 2069.829416]  ? lock_downgrade+0x6d0/0x6d0
[ 2069.830179]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2069.831142]  ___sys_sendmsg+0xf3/0x170
[ 2069.831862]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2069.832693]  ? __fget_files+0x2cf/0x520
[ 2069.833424]  ? lock_downgrade+0x6d0/0x6d0
[ 2069.834249]  ? find_held_lock+0x2c/0x110
[ 2069.835057]  ? __fget_files+0x2f8/0x520
[ 2069.835845]  ? __fget_light+0xea/0x290
[ 2069.836614]  __sys_sendmsg+0xe5/0x1b0
[ 2069.837351]  ? __sys_sendmsg_sock+0x40/0x40
[ 2069.838188]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2069.839084]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2069.840092]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2069.841059]  ? trace_hardirqs_on+0x5b/0x180
[ 2069.841883]  do_syscall_64+0x33/0x40
[ 2069.842594]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2069.843557] RIP: 0033:0x7f5927a91b19
[ 2069.844253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2069.845180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2069.847744] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2069.847763] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2069.847771] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2069.847780] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2069.847788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2069.847797] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2069.861442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2069.869629] FAULT_INJECTION: forcing a failure.
[ 2069.869629] name failslab, interval 1, probability 0, space 0, times 0
[ 2069.873060] CPU: 0 PID: 57695 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2069.874557] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2069.876305] Call Trace:
[ 2069.876876]  dump_stack+0x107/0x167
[ 2069.877663]  should_fail.cold+0x5/0xa
[ 2069.878480]  ? __delayacct_tsk_init+0x1b/0x80
[ 2069.879450]  should_failslab+0x5/0x20
[ 2069.880268]  kmem_cache_alloc+0x5b/0x310
[ 2069.881147]  ? prepare_creds+0x466/0x5e0
[ 2069.882027]  __delayacct_tsk_init+0x1b/0x80
[ 2069.882948]  copy_process+0x3395/0x78b0
[ 2069.883801]  ? __lock_acquire+0xbb1/0x5b00
[ 2069.884709]  ? lock_downgrade+0x6d0/0x6d0
[ 2069.885587]  ? __cleanup_sighand+0xb0/0xb0
[ 2069.886501]  ? lock_acquire+0x197/0x470
[ 2069.887345]  ? find_held_lock+0x2c/0x110
[ 2069.888204]  kernel_clone+0xe7/0x980
[ 2069.888996]  ? lock_downgrade+0x6d0/0x6d0
[ 2069.889881]  ? find_held_lock+0x2c/0x110
[ 2069.890732]  ? create_io_thread+0xf0/0xf0
[ 2069.891612]  ? ksys_write+0x12d/0x260
[ 2069.892433]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2069.893458]  __do_sys_fork+0x8a/0xc0
[ 2069.894252]  ? kernel_thread+0xf0/0xf0
[ 2069.895083]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2069.896183]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2069.897261]  ? trace_hardirqs_on+0x5b/0x180
[ 2069.898176]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2069.899262]  do_syscall_64+0x33/0x40
[ 2069.900065]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2069.901139] RIP: 0033:0x7f46dde30b19
[ 2069.901925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2069.905797] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2069.907395] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2069.908899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2069.910420] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2069.911919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2069.913426] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2069.950661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2069.952796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2069.955307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:13:58 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0xfffffffffffffdef)

07:13:58 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 8)

07:13:58 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:13:58 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
lremovexattr(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)=@random={'security.', '(\x00'})

07:13:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="0004040000000004fe800000000000000100000000000000fe800000001c35ac3a00f01c2705b08c"], 0x28)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0))
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000180)={0x3, 0xad2c, 0x8, 0x0, 0x1})
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x220002, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2c, r5, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'sit0\x00', <r6=>0x0, 0x2f, 0xf7, 0x60, 0x0, 0x14, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x10000, 0x1ff}})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000640)={&(0x7f00000003c0), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40814}, 0x40)
openat(r3, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x200a00, 0x10a)
openat(r3, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x100, 0x6)

[ 2070.163746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:13:59 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 9)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2070.253687] FAULT_INJECTION: forcing a failure.
[ 2070.253687] name failslab, interval 1, probability 0, space 0, times 0
[ 2070.257081] CPU: 0 PID: 57866 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2070.258970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2070.261173] Call Trace:
[ 2070.261779]  dump_stack+0x107/0x167
[ 2070.262584]  should_fail.cold+0x5/0xa
[ 2070.263402]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280
[ 2070.264952]  should_failslab+0x5/0x20
[ 2070.265819]  __kmalloc+0x72/0x390
[ 2070.266583]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280
[ 2070.267927]  genl_family_rcv_msg_doit+0xda/0x330
[ 2070.268930]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2070.270334]  ? cap_capable+0x1cd/0x230
[ 2070.271162]  ? security_capable+0x95/0xc0
[ 2070.272044]  ? ns_capable+0xe2/0x110
[ 2070.272837]  genl_rcv_msg+0x36a/0x5a0
[ 2070.273641]  ? genl_get_cmd+0x480/0x480
[ 2070.274490]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2070.275576]  ? lock_release+0x680/0x680
[ 2070.276415]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2070.277369]  netlink_rcv_skb+0x14b/0x430
[ 2070.278242]  ? genl_get_cmd+0x480/0x480
[ 2070.279079]  ? netlink_ack+0xab0/0xab0
[ 2070.279909]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2070.280874]  ? is_vmalloc_addr+0x7b/0xb0
[ 2070.281749]  genl_rcv+0x24/0x40
[ 2070.282440]  netlink_unicast+0x54e/0x800
[ 2070.283299]  ? netlink_attachskb+0x870/0x870
[ 2070.284240]  netlink_sendmsg+0x90f/0xe00
[ 2070.285098]  ? netlink_unicast+0x800/0x800
[ 2070.286015]  ? netlink_unicast+0x800/0x800
07:13:59 executing program 1:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)

[ 2070.286906]  __sock_sendmsg+0x154/0x190
[ 2070.287907]  ____sys_sendmsg+0x70d/0x870
[ 2070.288758]  ? sock_write_iter+0x3d0/0x3d0
[ 2070.289629]  ? do_recvmmsg+0x6d0/0x6d0
[ 2070.290447]  ? lock_downgrade+0x6d0/0x6d0
[ 2070.291305]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2070.292387]  ___sys_sendmsg+0xf3/0x170
[ 2070.293190]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2070.294141]  ? __fget_files+0x2cf/0x520
[ 2070.294979]  ? lock_downgrade+0x6d0/0x6d0
[ 2070.295843]  ? find_held_lock+0x2c/0x110
[ 2070.296685]  ? __fget_files+0x2f8/0x520
[ 2070.297511]  ? __fget_light+0xea/0x290
[ 2070.298324]  __sys_sendmsg+0xe5/0x1b0
[ 2070.299100]  ? __sys_sendmsg_sock+0x40/0x40
[ 2070.299984]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2070.300957]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2070.302045]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2070.303129]  ? trace_hardirqs_on+0x5b/0x180
[ 2070.304019]  do_syscall_64+0x33/0x40
[ 2070.304805]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2070.305864] RIP: 0033:0x7f5927a91b19
[ 2070.306644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2070.310521] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2070.312119] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2070.313610] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2070.315123] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2070.316621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2070.318121] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2070.334768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2070.336589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2070.340112] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2070.371836] FAULT_INJECTION: forcing a failure.
[ 2070.371836] name failslab, interval 1, probability 0, space 0, times 0
[ 2070.374438] CPU: 0 PID: 58130 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2070.375916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2070.377680] Call Trace:
[ 2070.378241]  dump_stack+0x107/0x167
[ 2070.379006]  should_fail.cold+0x5/0xa
[ 2070.379813]  ? create_object.isra.0+0x3a/0xa20
[ 2070.380781]  should_failslab+0x5/0x20
[ 2070.381580]  kmem_cache_alloc+0x5b/0x310
[ 2070.382439]  create_object.isra.0+0x3a/0xa20
[ 2070.383356]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2070.384408]  kmem_cache_alloc+0x159/0x310
[ 2070.385281]  ? prepare_creds+0x466/0x5e0
[ 2070.386285]  __delayacct_tsk_init+0x1b/0x80
[ 2070.387187]  copy_process+0x3395/0x78b0
[ 2070.388024]  ? __lock_acquire+0xbb1/0x5b00
[ 2070.388926]  ? lock_downgrade+0x6d0/0x6d0
[ 2070.389818]  ? __cleanup_sighand+0xb0/0xb0
[ 2070.390713]  ? lock_acquire+0x197/0x470
[ 2070.391553]  ? find_held_lock+0x2c/0x110
[ 2070.392393]  kernel_clone+0xe7/0x980
[ 2070.393172]  ? lock_downgrade+0x6d0/0x6d0
[ 2070.394027]  ? find_held_lock+0x2c/0x110
[ 2070.394874]  ? create_io_thread+0xf0/0xf0
[ 2070.395754]  ? ksys_write+0x12d/0x260
[ 2070.396581]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2070.397594]  __do_sys_fork+0x8a/0xc0
[ 2070.398387]  ? kernel_thread+0xf0/0xf0
[ 2070.399221]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2070.400321]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2070.401395]  ? trace_hardirqs_on+0x5b/0x180
[ 2070.402307]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2070.403385]  do_syscall_64+0x33/0x40
[ 2070.404162]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2070.405242] RIP: 0033:0x7f46dde30b19
[ 2070.406036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2070.409910] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2070.411511] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2070.413010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2070.414520] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2070.416027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2070.417532] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:14:15 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 10)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:15 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:14:15 executing program 1:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x84d}}, 0x43)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x103000, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8)
recvmmsg$unix(r0, &(0x7f0000002f00)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/250, 0xfa}, {&(0x7f0000001440)=""/199, 0xc7}, {&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000001640)=""/229, 0xe5}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000001840)=""/216, 0xd8}], 0x8, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001a40)=@abs, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/117, 0x75}, {&(0x7f0000001c40)=""/71, 0x47}, {&(0x7f0000001cc0)=""/243, 0xf3}, {&(0x7f0000001dc0)=""/4096, 0x1000}], 0x5, &(0x7f0000002e40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x10060, &(0x7f0000002f80)={0x77359400})
write$P9_RGETATTR(r2, &(0x7f0000002fc0)={0xa0, 0x19, 0x1, {0x406, {0x10, 0x0, 0x5}, 0x1, r3, r4, 0x6a, 0x9, 0x7f, 0x6, 0x8, 0x2, 0xff, 0x436610c5, 0x3, 0x1ffc0000000000, 0xfffffffffffffff9, 0x9, 0x9, 0x40, 0x1e6}}, 0xa0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

07:14:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:14:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2086.388121] FAULT_INJECTION: forcing a failure.
[ 2086.388121] name failslab, interval 1, probability 0, space 0, times 0
[ 2086.391502] CPU: 0 PID: 58141 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2086.393281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2086.395452] Call Trace:
[ 2086.396137]  dump_stack+0x107/0x167
[ 2086.397066]  should_fail.cold+0x5/0xa
[ 2086.397581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2086.398062]  ? dup_fd+0x89/0xf40
[ 2086.400563]  should_failslab+0x5/0x20
[ 2086.401360]  kmem_cache_alloc+0x5b/0x310
[ 2086.402243]  dup_fd+0x89/0xf40
[ 2086.402922]  ? audit_filter_inodes+0x40/0x40
[ 2086.403855]  ? security_task_alloc+0xe6/0x260
[ 2086.404816]  copy_process+0x197c/0x78b0
[ 2086.405656]  ? __lock_acquire+0xbb1/0x5b00
[ 2086.406587]  ? __cleanup_sighand+0xb0/0xb0
[ 2086.407502]  ? lock_acquire+0x197/0x470
[ 2086.408357]  ? find_held_lock+0x2c/0x110
[ 2086.409232]  kernel_clone+0xe7/0x980
[ 2086.410022]  ? lock_downgrade+0x6d0/0x6d0
[ 2086.410906]  ? find_held_lock+0x2c/0x110
[ 2086.411777]  ? create_io_thread+0xf0/0xf0
[ 2086.412665]  ? ksys_write+0x12d/0x260
[ 2086.413466]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2086.414498]  __do_sys_fork+0x8a/0xc0
[ 2086.415296]  ? kernel_thread+0xf0/0xf0
[ 2086.416129]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2086.417236]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2086.418322]  ? trace_hardirqs_on+0x5b/0x180
[ 2086.419222]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2086.420329]  do_syscall_64+0x33/0x40
[ 2086.421111]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2086.422193] RIP: 0033:0x7f46dde30b19
[ 2086.422984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2086.426870] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2086.428480] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2086.429998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2086.431505] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2086.433014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2086.434545] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2086.445052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
07:14:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 9)

07:14:15 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:14:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c80)={0xdc, 0x0, 0x202, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x4}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1004}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfd}, @NL80211_ATTR_SCAN_SSIDS={0x94, 0x2d, 0x0, 0x1, [{0xe, 0x0, @random="0eea880a400c73b4468c"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x16, 0x0, @random="cd3f9dc6bbe591482bbcdc3346d14431c655"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1e, 0x0, @random="e730898b00ec1d3bf75af403b6e2c68320a81471d937a1a16c48"}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00~=', @ANYRES16=r2, @ANYBLOB="0b0b00000000000000000100000018000180140002000000000000ffff000000000600000000"], 0x2c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x7ff}}, './cgroup/cgroup.procs\x00'})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8080c3d4", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf25680000000c009900040000010105539dce16c5b88087eb019507000605020805c107970440003f032ce254b0bf72e87100000c00c70096db1676608652672c00c700090781031f000407003f000007000005040607140704fd050709d85ffd17d1fe261000c7009503070576ee90b5efc737070033d0c0c3f03d000000000004"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='sy-\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=<r4=>0x0, @ANYBLOB="07000040000000400000021a47a5001c006400001f2990787f000001ac14541883ec8a6401010000421e689c7c5eafc11db6b56a0856197622d36ed9398f"]})
r5 = creat(&(0x7f0000000500)='./cgroup/cgroup.procs/file0\x00', 0x140)
sendmsg$inet(r5, &(0x7f0000000800)={&(0x7f0000000540)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="0b43ce456ed4150a7ceb203c43a9b72f27d30a9899d2a6f7eb738710e4912381d2e82b66a557d4ec701dff34cd80c252f5f5d8a10f74fb05bedcde32d6cfb6626594be36f21a59d67ac3617e0e13699227c5a4ad171efbe3ba4b7864eb46dba9cafddd140812b584283ed528c1df460996e5aeca08bf4852", 0x78}, {&(0x7f0000000900)="04ca78f75ad0d0197a60a5f7cb08cbdd532b0d293945da764b1cfd4e60292da66eb9901f8475a537bdeb25d3392cab9320cc0b60d0405ed7e26691e9ecfba0f83a794cf139ce08e9c3b4e85b4825ab82606a806c0cc40864846e278cec7c9fe12c78fa4a902a3e86a36ba22ff6f4e4381dd297832e20da0266913a4fe816443543b363d77e5612b535da77f27c90788d56b7e9ba7d18aa173469000e2a5002e05fa7b80f964bc748592aa6461386740d671be48fc8ce815c236ff9999840d7e901dc05a9d3b91e4fb4d139a714d28128ff48e8c5cd84ae6ad59a84bc0c3f99aca4f1e30ee2b8193f613ec5d965bea98fdb4f370bf5eb7d1415fe981996da35f81b1436d13c99748843ce68a8de688e6e248e2bd4ce4473cbe9806b41923a14e0a3ce58a57ec87944bb51e699ecf31a70a3659453a8fb48ce4ddaefcba1a5d9aab6a6d5841378faf00a53f9114c32282e6f8170525d11f893f7", 0x159}, {&(0x7f0000000a80)="2b19b0031a4d62edc6bc7c6d1fa5506b039ee9d4d18d28ba5c7a9d6d4c319708e421e0e47a4357a12d2352241489f1b5ff546d0de3ecfa8237c06959a1a4ccd8dfd86bd1bb74856583b55ce20ad317f63fea0a4251a1f8101f29929c6290fc242ce3569bb62ede0b10552d74bf70ca2cba169be5e7f89d75e90d5c006c903a67bb78622d", 0x84}, {&(0x7f0000000780)="25b3e55b184e53a10e337f9a4f8587c42b7065fdbd64ee37", 0x18}], 0x4}, 0x8004004)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="69705f767469fc000000000000000000", @ANYRES32=<r6=>0x0, @ANYBLOB="7800001000000001000000024eea0038006700000104907800000000ffffffff94040000004418c66000000409000000020000000400000007000000088907e3ac1414aa"]})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x3, 0x6, 0x10000, 0x43, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0xfd}, 0x8000, 0x7880, 0x80000000}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x100, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x48091}, 0x40040)
r8 = pidfd_getfd(r5, r0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000640))
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'ip6erspan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6gre0\x00', r7, 0x2f, 0x4, 0x1, 0x8000, 0x10, @mcast2, @loopback, 0x40, 0x20, 0x9, 0x2}})
write$cgroup_pid(r9, &(0x7f00000000c0), 0x12)

07:14:15 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 11)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = accept(r0, &(0x7f0000000100)=@ethernet={0x0, @link_local}, &(0x7f0000000000)=0x80)
fadvise64(r1, 0xaf, 0x4, 0x2)

07:14:15 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2086.696553] FAULT_INJECTION: forcing a failure.
[ 2086.696553] name failslab, interval 1, probability 0, space 0, times 0
[ 2086.699234] CPU: 1 PID: 58471 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2086.700709] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2086.702459] Call Trace:
[ 2086.703023]  dump_stack+0x107/0x167
[ 2086.703805]  should_fail.cold+0x5/0xa
[ 2086.704630]  ? create_object.isra.0+0x3a/0xa20
[ 2086.705597]  should_failslab+0x5/0x20
[ 2086.706414]  kmem_cache_alloc+0x5b/0x310
[ 2086.707268]  create_object.isra.0+0x3a/0xa20
[ 2086.708186]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2086.709256]  kmem_cache_alloc+0x159/0x310
[ 2086.710142]  dup_fd+0x89/0xf40
[ 2086.710821]  ? audit_filter_inodes+0x40/0x40
[ 2086.711778]  ? security_task_alloc+0xe6/0x260
[ 2086.712735]  copy_process+0x197c/0x78b0
[ 2086.713595]  ? __lock_acquire+0xbb1/0x5b00
[ 2086.714507]  ? __cleanup_sighand+0xb0/0xb0
[ 2086.715413]  ? lock_acquire+0x197/0x470
[ 2086.716255]  ? find_held_lock+0x2c/0x110
[ 2086.717107]  kernel_clone+0xe7/0x980
[ 2086.717903]  ? lock_downgrade+0x6d0/0x6d0
[ 2086.718775]  ? find_held_lock+0x2c/0x110
[ 2086.719628]  ? create_io_thread+0xf0/0xf0
[ 2086.720505]  ? ksys_write+0x12d/0x260
[ 2086.721312]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2086.722345]  __do_sys_fork+0x8a/0xc0
[ 2086.723125]  ? kernel_thread+0xf0/0xf0
[ 2086.723952]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2086.725060]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2086.726376]  ? trace_hardirqs_on+0x5b/0x180
[ 2086.727543]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2086.728821]  do_syscall_64+0x33/0x40
[ 2086.729629]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2086.730744] RIP: 0033:0x7f46dde30b19
[ 2086.731545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2086.735562] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2086.737214] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2086.738740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2086.740246] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2086.741737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2086.743258] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2086.745601] FAULT_INJECTION: forcing a failure.
[ 2086.745601] name failslab, interval 1, probability 0, space 0, times 0
[ 2086.748065] CPU: 1 PID: 58149 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2086.749522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2086.751287] Call Trace:
[ 2086.751848]  dump_stack+0x107/0x167
[ 2086.752615]  should_fail.cold+0x5/0xa
[ 2086.753416]  ? create_object.isra.0+0x3a/0xa20
[ 2086.754395]  should_failslab+0x5/0x20
[ 2086.755191]  kmem_cache_alloc+0x5b/0x310
[ 2086.756041]  ? __mutex_lock+0x5af/0x10b0
[ 2086.756899]  create_object.isra.0+0x3a/0xa20
[ 2086.757838]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2086.758915]  __kmalloc+0x16e/0x390
[ 2086.759682]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280
[ 2086.761027]  genl_family_rcv_msg_doit+0xda/0x330
[ 2086.762052]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2086.763467]  ? cap_capable+0x1cd/0x230
[ 2086.764292]  ? security_capable+0x95/0xc0
[ 2086.765171]  ? ns_capable+0xe2/0x110
[ 2086.765966]  genl_rcv_msg+0x36a/0x5a0
[ 2086.766775]  ? genl_get_cmd+0x480/0x480
[ 2086.767616]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2086.768703]  ? lock_release+0x680/0x680
[ 2086.769547]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2086.770499]  netlink_rcv_skb+0x14b/0x430
[ 2086.771360]  ? genl_get_cmd+0x480/0x480
[ 2086.772195]  ? netlink_ack+0xab0/0xab0
[ 2086.773025]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2086.773991]  ? is_vmalloc_addr+0x7b/0xb0
[ 2086.774852]  genl_rcv+0x24/0x40
[ 2086.775541]  netlink_unicast+0x54e/0x800
[ 2086.776403]  ? netlink_attachskb+0x870/0x870
[ 2086.777345]  netlink_sendmsg+0x90f/0xe00
[ 2086.778220]  ? netlink_unicast+0x800/0x800
[ 2086.779123]  ? netlink_unicast+0x800/0x800
[ 2086.780017]  __sock_sendmsg+0x154/0x190
[ 2086.780849]  ____sys_sendmsg+0x70d/0x870
[ 2086.781710]  ? sock_write_iter+0x3d0/0x3d0
[ 2086.782614]  ? do_recvmmsg+0x6d0/0x6d0
[ 2086.783437]  ? lock_downgrade+0x6d0/0x6d0
[ 2086.784320]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2086.785464]  ___sys_sendmsg+0xf3/0x170
[ 2086.786305]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2086.787290]  ? __fget_files+0x2cf/0x520
[ 2086.788121]  ? lock_downgrade+0x6d0/0x6d0
[ 2086.788998]  ? find_held_lock+0x2c/0x110
[ 2086.789881]  ? __fget_files+0x2f8/0x520
[ 2086.790737]  ? __fget_light+0xea/0x290
[ 2086.791578]  __sys_sendmsg+0xe5/0x1b0
[ 2086.792388]  ? __sys_sendmsg_sock+0x40/0x40
[ 2086.793298]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2086.794313]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2086.795433]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2086.796513]  ? trace_hardirqs_on+0x5b/0x180
[ 2086.797424]  do_syscall_64+0x33/0x40
[ 2086.798250]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2086.799323] RIP: 0033:0x7f5927a91b19
[ 2086.800125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2086.804018] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2086.805632] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2086.807139] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2086.808646] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2086.810158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2086.811652] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
07:14:15 executing program 1:
r0 = epoll_create(0x8000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x20000300})
epoll_wait(r0, &(0x7f00000001c0)=[{}], 0x1, 0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)

[ 2086.921530] audit: type=1400 audit(1751872455.685:12): avc:  denied  { block_suspend } for  pid=58665 comm="syz-executor.1" capability=36  scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1
07:14:15 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x7, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 2087.026785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2087.028420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2087.030236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:14:15 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:14:15 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 12)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:15 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00')
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
openat(r2, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x61ca00, 0x80)

07:14:15 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 10)

[ 2087.224131] FAULT_INJECTION: forcing a failure.
[ 2087.224131] name failslab, interval 1, probability 0, space 0, times 0
[ 2087.226729] CPU: 1 PID: 58873 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2087.228186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2087.229940] Call Trace:
[ 2087.230503]  dump_stack+0x107/0x167
[ 2087.231297]  should_fail.cold+0x5/0xa
[ 2087.232095]  ? alloc_fdtable+0x84/0x280
[ 2087.232947]  should_failslab+0x5/0x20
[ 2087.233775]  kmem_cache_alloc_trace+0x55/0x320
[ 2087.234749]  ? rwlock_bug.part.0+0x90/0x90
[ 2087.235640]  alloc_fdtable+0x84/0x280
[ 2087.236439]  dup_fd+0x92e/0xf40
[ 2087.237147]  copy_process+0x197c/0x78b0
[ 2087.238166]  ? __lock_acquire+0xbb1/0x5b00
[ 2087.239352]  ? __cleanup_sighand+0xb0/0xb0
[ 2087.240519]  ? lock_acquire+0x197/0x470
[ 2087.241623]  ? find_held_lock+0x2c/0x110
[ 2087.242625]  kernel_clone+0xe7/0x980
[ 2087.243441]  ? lock_downgrade+0x6d0/0x6d0
[ 2087.244327]  ? find_held_lock+0x2c/0x110
[ 2087.245200]  ? create_io_thread+0xf0/0xf0
[ 2087.246128]  ? ksys_write+0x12d/0x260
[ 2087.246953]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2087.248001]  __do_sys_fork+0x8a/0xc0
[ 2087.248802]  ? kernel_thread+0xf0/0xf0
[ 2087.249663]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2087.250830]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2087.251947]  ? trace_hardirqs_on+0x5b/0x180
[ 2087.252877]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2087.254003]  do_syscall_64+0x33/0x40
[ 2087.254824]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2087.255932] RIP: 0033:0x7f46dde30b19
[ 2087.256739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2087.260727] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2087.262398] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2087.263930] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2087.265498] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2087.267074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2087.268611] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2087.292082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2087.297460] FAULT_INJECTION: forcing a failure.
[ 2087.297460] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2087.302988] CPU: 0 PID: 58889 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2087.304478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2087.306238] Call Trace:
[ 2087.306801]  dump_stack+0x107/0x167
[ 2087.307570]  should_fail.cold+0x5/0xa
[ 2087.308378]  __alloc_pages_nodemask+0x182/0x600
[ 2087.309363]  ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200
[ 2087.310644]  ? __is_insn_slot_addr+0x14c/0x290
[ 2087.311614]  ? lock_chain_count+0x20/0x20
[ 2087.312484]  ? __kernel_text_address+0x9/0x40
[ 2087.313425]  ? unwind_get_return_address+0x55/0xa0
[ 2087.314477]  ? create_prof_cpu_mask+0x20/0x20
[ 2087.315426]  ? arch_stack_walk+0x99/0xf0
[ 2087.316284]  alloc_pages_current+0x187/0x280
[ 2087.317213]  kmalloc_order+0x35/0x160
[ 2087.318030]  kmalloc_order_trace+0x14/0xa0
[ 2087.318921]  wiphy_new_nm+0x6f3/0x1e00
[ 2087.319745]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2087.320732]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2087.321847]  ? __local_bh_enable_ip+0x9d/0x100
[ 2087.322810]  ? trace_hardirqs_on+0x5b/0x180
[ 2087.323728]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2087.324764]  ? ____sys_sendmsg+0x70d/0x870
[ 2087.325653]  ? ___sys_sendmsg+0xf3/0x170
[ 2087.326517]  ? __sys_sendmsg+0xe5/0x1b0
[ 2087.327357]  ? do_syscall_64+0x33/0x40
[ 2087.328176]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2087.329301]  ? lock_acquire+0x197/0x470
[ 2087.330141]  ? create_object.isra.0+0x3ad/0xa20
[ 2087.331135]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2087.332119]  hwsim_new_radio_nl+0x991/0x1080
[ 2087.333052]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2087.334169]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2087.335552]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2087.336944]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2087.337980]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2087.339383]  ? cap_capable+0x1cd/0x230
[ 2087.340222]  ? ns_capable+0xe2/0x110
[ 2087.341029]  genl_rcv_msg+0x36a/0x5a0
[ 2087.341854]  ? genl_get_cmd+0x480/0x480
[ 2087.342693]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2087.343798]  ? lock_release+0x680/0x680
[ 2087.344653]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2087.345611]  netlink_rcv_skb+0x14b/0x430
[ 2087.346476]  ? genl_get_cmd+0x480/0x480
[ 2087.347329]  ? netlink_ack+0xab0/0xab0
[ 2087.348161]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2087.348689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2087.349136]  ? is_vmalloc_addr+0x7b/0xb0
[ 2087.349188]  genl_rcv+0x24/0x40
[ 2087.353041]  netlink_unicast+0x54e/0x800
[ 2087.353915]  ? netlink_attachskb+0x870/0x870
[ 2087.354863]  netlink_sendmsg+0x90f/0xe00
[ 2087.355727]  ? netlink_unicast+0x800/0x800
[ 2087.356631]  ? netlink_unicast+0x800/0x800
[ 2087.357530]  __sock_sendmsg+0x154/0x190
[ 2087.358378]  ____sys_sendmsg+0x70d/0x870
[ 2087.359247]  ? sock_write_iter+0x3d0/0x3d0
[ 2087.360149]  ? do_recvmmsg+0x6d0/0x6d0
[ 2087.360991]  ? lock_downgrade+0x6d0/0x6d0
[ 2087.361877]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2087.362996]  ___sys_sendmsg+0xf3/0x170
[ 2087.363829]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2087.364800]  ? __fget_files+0x2cf/0x520
[ 2087.365641]  ? lock_downgrade+0x6d0/0x6d0
[ 2087.366755]  ? find_held_lock+0x2c/0x110
[ 2087.367887]  ? __fget_files+0x2f8/0x520
[ 2087.368989]  ? __fget_light+0xea/0x290
[ 2087.370078]  __sys_sendmsg+0xe5/0x1b0
[ 2087.371120]  ? __sys_sendmsg_sock+0x40/0x40
[ 2087.372300]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2087.373337]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2087.374506]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2087.375745]  ? trace_hardirqs_on+0x5b/0x180
[ 2087.376733]  do_syscall_64+0x33/0x40
[ 2087.377729]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2087.378827] RIP: 0033:0x7f5927a91b19
[ 2087.379613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2087.383502] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2087.385107] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2087.386620] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2087.388119] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2087.389619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2087.391124] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
07:14:16 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:14:16 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:14:16 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 13)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2087.473201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2087.475089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2087.477022] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:14:16 executing program 1:
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff}}, './file0\x00'})
r0 = getpgrp(0x0)
pidfd_open(r0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r0, 0x12)

[ 2087.507019] FAULT_INJECTION: forcing a failure.
[ 2087.507019] name failslab, interval 1, probability 0, space 0, times 0
[ 2087.509773] CPU: 0 PID: 59092 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2087.511262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2087.513020] Call Trace:
[ 2087.513585]  dump_stack+0x107/0x167
[ 2087.514368]  should_fail.cold+0x5/0xa
[ 2087.515176]  ? create_object.isra.0+0x3a/0xa20
[ 2087.516164]  should_failslab+0x5/0x20
[ 2087.516974]  kmem_cache_alloc+0x5b/0x310
[ 2087.517853]  create_object.isra.0+0x3a/0xa20
[ 2087.518796]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2087.519880]  kmem_cache_alloc_trace+0x151/0x320
[ 2087.520862]  ? rwlock_bug.part.0+0x90/0x90
[ 2087.521766]  alloc_fdtable+0x84/0x280
[ 2087.522589]  dup_fd+0x92e/0xf40
[ 2087.523302]  copy_process+0x197c/0x78b0
[ 2087.524160]  ? __lock_acquire+0xbb1/0x5b00
[ 2087.525081]  ? __cleanup_sighand+0xb0/0xb0
[ 2087.526004]  ? lock_acquire+0x197/0x470
[ 2087.526857]  ? find_held_lock+0x2c/0x110
[ 2087.527724]  kernel_clone+0xe7/0x980
[ 2087.528515]  ? lock_downgrade+0x6d0/0x6d0
[ 2087.529395]  ? find_held_lock+0x2c/0x110
[ 2087.530275]  ? create_io_thread+0xf0/0xf0
[ 2087.531156]  ? ksys_write+0x12d/0x260
[ 2087.531975]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2087.533004]  __do_sys_fork+0x8a/0xc0
[ 2087.533794]  ? kernel_thread+0xf0/0xf0
[ 2087.534646]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2087.535759]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2087.536849]  ? trace_hardirqs_on+0x5b/0x180
[ 2087.537768]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2087.538866]  do_syscall_64+0x33/0x40
[ 2087.539671]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2087.540764] RIP: 0033:0x7f46dde30b19
[ 2087.541567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2087.545486] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2087.547119] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2087.548628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2087.550139] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2087.551643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2087.553154] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:14:16 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2087.658719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2087.718524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2087.720315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2087.721900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:14:33 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:14:33 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:14:33 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:14:33 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:14:33 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 11)

07:14:33 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 14)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:33 executing program 1:
pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="31805c9b97931c0bfb32c3d6d44c4d7165d6e309fc92fab418d4db5e935b9e3325b658b0de901c8af9", 0x29}, {&(0x7f0000000080)="ee7e125cbd4bf8eeecd1327a994c8dbbcaaa859e49f942965b2a8836463c54e8a20fbfa4d985069498e959a7d5898faa5e9878eff63795b2fb", 0x39}, {&(0x7f0000000100)="7de8792c8c14e98f05883386d60a757492b3a92618bba7be7df6ba11e2b809fe8b1d23f177580af44a48f26a083740dd4fc63c541c40a0781c1a403cd167badcdde2286ce8b7548bd09459f7613a436d56cb5fdef2d011c6947349537d8c149e9c9091e231c8e130c174ce626ec916bb1e2010ad0d1e4964cd77075fcabfd15a87ece4a83be4f6a23e594be0ede8712dc36c311bf6bed978a5806c528f5b75238c120b87", 0xa4}], 0x3, 0xbb9, 0x4, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:14:33 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000487c0)={0x0, ""/256, 0x0, <r1=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000489c0)={{<r2=>0x0, 0xc8a2a42, 0x1, 0xfffffffffffffffc, 0x7b, 0x4, 0xffff, 0x101, 0x4, 0x790, 0x0, 0x4, 0xfff, 0x7f, 0x6}})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000499c0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r3=>0x0}], 0xab, "fc91e1c427d8cb"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a9c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}], 0xe5, "cb950ef073e65f"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r5=>0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x0, "46dacd8396fe92"})
[ 2104.581808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2104.599471] FAULT_INJECTION: forcing a failure.
[ 2104.599471] name failslab, interval 1, probability 0, space 0, times 0
[ 2104.599511] FAULT_INJECTION: forcing a failure.
[ 2104.599511] name failslab, interval 1, probability 0, space 0, times 0
[ 2104.602126] CPU: 1 PID: 59305 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2104.605319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2104.607193] Call Trace:
[ 2104.607795]  dump_stack+0x107/0x167
[ 2104.608619]  should_fail.cold+0x5/0xa
[ 2104.609480]  ? kvmalloc_node+0x119/0x170
[ 2104.610408]  should_failslab+0x5/0x20
[ 2104.611268]  __kmalloc_node+0x76/0x420
[ 2104.612148]  kvmalloc_node+0x119/0x170
[ 2104.613025]  alloc_fdtable+0xd3/0x280
[ 2104.613890]  dup_fd+0x92e/0xf40
[ 2104.614670]  copy_process+0x197c/0x78b0
[ 2104.615578]  ? __lock_acquire+0xbb1/0x5b00
[ 2104.616565]  ? __cleanup_sighand+0xb0/0xb0
[ 2104.617535]  ? lock_acquire+0x197/0x470
[ 2104.618454]  ? find_held_lock+0x2c/0x110
[ 2104.619382]  kernel_clone+0xe7/0x980
[ 2104.620225]  ? lock_downgrade+0x6d0/0x6d0
[ 2104.621173]  ? find_held_lock+0x2c/0x110
[ 2104.622101]  ? create_io_thread+0xf0/0xf0
[ 2104.623044]  ? ksys_write+0x12d/0x260
[ 2104.623908]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2104.625013]  __do_sys_fork+0x8a/0xc0
[ 2104.625859]  ? kernel_thread+0xf0/0xf0
[ 2104.626769]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2104.627960]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2104.629143]  ? trace_hardirqs_on+0x5b/0x180
[ 2104.630138]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2104.631322]  do_syscall_64+0x33/0x40
[ 2104.632173]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2104.633347] RIP: 0033:0x7f46dde30b19
[ 2104.634200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2104.638421] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2104.640174] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2104.641834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2104.643467] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2104.645086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2104.646714] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2104.648339] CPU: 0 PID: 59303 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2104.649465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2104.650786] Call Trace:
[ 2104.651209]  dump_stack+0x107/0x167
[ 2104.651773]  should_fail.cold+0x5/0xa
[ 2104.652611]  ? create_object.isra.0+0x3a/0xa20
[ 2104.653338]  should_failslab+0x5/0x20
[ 2104.653933]  kmem_cache_alloc+0x5b/0x310
[ 2104.654565]  create_object.isra.0+0x3a/0xa20
[ 2104.655233]  ? kasan_unpoison_shadow+0x33/0x50
[ 2104.655942]  kmalloc_order+0xfe/0x160
[ 2104.656527]  kmalloc_order_trace+0x14/0xa0
[ 2104.656575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2104.657170]  wiphy_new_nm+0x6f3/0x1e00
[ 2104.657189]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2104.657205]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2104.657227]  ? __local_bh_enable_ip+0x9d/0x100
[ 2104.661976]  ? trace_hardirqs_on+0x5b/0x180
[ 2104.662697]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2104.663507]  ? ____sys_sendmsg+0x70d/0x870
[ 2104.664213]  ? ___sys_sendmsg+0xf3/0x170
[ 2104.664875]  ? __sys_sendmsg+0xe5/0x1b0
[ 2104.665521]  ? do_syscall_64+0x33/0x40
[ 2104.666168]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2104.667054]  ? lock_acquire+0x197/0x470
[ 2104.667711]  ? create_object.isra.0+0x3ad/0xa20
[ 2104.668487]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2104.669279]  hwsim_new_radio_nl+0x991/0x1080
[ 2104.670008]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2104.670821]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2104.671908]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2104.672959]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2104.673756]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2104.674822]  ? cap_capable+0x1cd/0x230
[ 2104.675466]  ? ns_capable+0xe2/0x110
[ 2104.676069]  genl_rcv_msg+0x36a/0x5a0
[ 2104.676697]  ? genl_get_cmd+0x480/0x480
[ 2104.677342]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2104.678196]  ? lock_release+0x680/0x680
[ 2104.678835]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2104.679564]  netlink_rcv_skb+0x14b/0x430
[ 2104.680229]  ? genl_get_cmd+0x480/0x480
[ 2104.680866]  ? netlink_ack+0xab0/0xab0
[ 2104.681501]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2104.682245]  ? is_vmalloc_addr+0x7b/0xb0
[ 2104.682915]  genl_rcv+0x24/0x40
[ 2104.683471]  netlink_unicast+0x54e/0x800
[ 2104.684125]  ? netlink_attachskb+0x870/0x870
[ 2104.684839]  netlink_sendmsg+0x90f/0xe00
[ 2104.685500]  ? netlink_unicast+0x800/0x800
[ 2104.686202]  ? netlink_unicast+0x800/0x800
[ 2104.686890]  __sock_sendmsg+0x154/0x190
[ 2104.687549]  ____sys_sendmsg+0x70d/0x870
[ 2104.688215]  ? sock_write_iter+0x3d0/0x3d0
[ 2104.688904]  ? do_recvmmsg+0x6d0/0x6d0
[ 2104.689549]  ? lock_downgrade+0x6d0/0x6d0
[ 2104.690232]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2104.691074]  ___sys_sendmsg+0xf3/0x170
[ 2104.691686]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2104.692429]  ? __fget_files+0x2cf/0x520
[ 2104.693070]  ? lock_downgrade+0x6d0/0x6d0
[ 2104.693736]  ? find_held_lock+0x2c/0x110
[ 2104.694404]  ? __fget_files+0x2f8/0x520
[ 2104.695045]  ? __fget_light+0xea/0x290
[ 2104.695677]  __sys_sendmsg+0xe5/0x1b0
[ 2104.696289]  ? __sys_sendmsg_sock+0x40/0x40
[ 2104.696999]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2104.697750]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2104.698603]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2104.699422]  ? trace_hardirqs_on+0x5b/0x180
[ 2104.700108]  do_syscall_64+0x33/0x40
[ 2104.700706]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2104.701538] RIP: 0033:0x7f5927a91b19
[ 2104.702104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2104.705044] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2104.706281] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2104.707436] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2104.708580] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2104.709736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2104.710880] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004b9c0)={0x0, <r8=>0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0, ""/256, <r10=>0x0, <r11=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r12=>0x0, ""/256, <r13=>0x0, <r14=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004c9c0)={{<r15=>0x0, 0xb, 0x9, 0x7, 0x7, 0x4, 0x7fffffff, 0x4, 0x3, 0xfffffffd, 0x7fff, 0x8, 0x100, 0x5}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004d9c0)={<r16=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f000004e9c0)={{<r17=>0x0, 0x1, 0x2d, 0x7fffffff, 0x0, 0x1f, 0x10000, 0x9, 0x5, 0x0, 0xfff, 0x401, 0x1, 0xc7f, 0x4}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004f9c0)={0x0, <r18=>0x0, "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", "2f23834ba5cb8d9ad1a979858c33ed3bbb92e38babec9f0a0e23bce3150f84d2203246b9def7479f0e7bbab8431dcbb8b3a413c213725f2641b476efe22fb15d97f8b8c6fdd9c28a71c5632bcf1228743c907c0a50e975baa266a3a0abcdadd8add1438d7eb597228b5dc9951f6413b132015f0f6d8714e438e8dc71b7814d045715df511ff9243de609a7aebc7ea757d84429ee4acb94541afff878071f40e113461be325c6ec31a7bca4684a737786d42a64a5e059fc161e3eee27a4b18612709a87bd6707f4b2c9497068032f1b30cdec881e67dcbf916f8bd5afe8d3abae3e184af83cbd7db9886126e648e6dc1c85bb30432a22be68456fedb4d2c57beab449d94f2d5231a2fbae77ee2a7fbcea0e6a38a6a30862482ef340ea03379141c286b4724cbb86f5022f526e0168217fd367dc4231f3387fa28dde76f0c66bd83ac6f85c19540cabc36384cc9be01d1909189ae0e7e485b38c37ca715807f447650b329893885c23e7552b3cdd8d6cca173a50c3c295adb0b0d380288a60426ba01335e825ca363dee41726af9479f99d508bd43e47a12ace338094bb05b04f94b9521c4a25e4f5ea327ca3c5bb4cd9096c1d65f8bb0ee380846e1a9dcb63b844ba9581e36d8c773523ce2d13594d116b054cc25d9f72869779dfee76bc743f0efcdaa3de1a75136ae91198e27c46d7ae2a91ce4a238ad8a4bc73783bb34f8f044da370813cf015afddf3771f6ce348bbb5b31a9c290123dc365842d5a9b89839721653121b58e30889a19b81d8057af15acef9072f7b46a2d36feda06f6ebc88ad03030e72ae182b42be3dee79cf1e675aa0d0460cda313e2594fa5f7fb884c3c8c643fac747f575d06bd56a54643afd94897de8433936b47a438404c62608dfd5df42fba0935bc2c6a8cc3465519f610b4d5495b85f178f26530549aaba437918ecebb1da70483724664d95dd9d04189c7a071ad1718f2c446c7760a088d7b61da4e551423d37a96d1db010eef686d85aab9c6a54bbd005c2fae99528398292c8fa5ec1ffe350e731e4bba65121f1b3518bbf40975fc6c35a60a20ad68a681c1fd8c41ab8e695546f02f82f733bbcd1ba87f176210e51f99eb06dc237de1a425421898b1b742db8634cd875d75cc56702040cd0ee047fdbb5d4a018cc92f96c760a52b4eefb13dcb541c47c1e2127083bb145b52a69326f2a2e0b6a36387a52f4ffa3a5791709ec15a477a24b4e596b7753307480ebdad4a9df0c18e378705368dbae39a0b28959b9a1239a86de134f4d9a02522f289d7490ae17d8ab12e54bc0810ef9e6831b4db7631cb35b8c4ae4f2b6eb5a0a25b91ba3cb7bde05220354cbc6034f90a3b0048ef82a50477d2a4b5b29d10ebc2d3834d16fa6561515b0880bb93de91db89ab41cf9aa8e1f21c6e31ead3896631ab18477c6afc166a0b6ab156dd5e5358d49f9300e365d57bf93d42985d18f29ac7719c28990c3832b7067774c7b6f02a84385c7bbc3c70f49391f8f268f290d920ba79851b384fa066bb241a5d21746016f58fd5eb72c6f944113fe4454764fb79fc0403d7d87bbad3574abbc3282a540190062914d684d8ee420161f8bdca6ace33034687a215ae377db71ca654bcd63e454863550e41e6e69db1251e2cda4e7555cc9974193093366b042509875004743d032de8c9197b97a3fec90d70bc417b140d2a1b29c7bd04013ab36b1a2a1ffab89877935d032401fa7ee49ae5678c7582a48030cf076405cf02a9e2581a217e00eedada40bb7b476bbc5605ef6382537b11712435538529adfc00a6f0306bb41e5eab55c8d6e7ab943151c78a756b4b99e65b77ee6e63f65a1791ee723cc5145e437729a8fba09f3db1303b6c02ad2ae1670a150fbf081dc0209ede87f1c5e793d9c540804b6ebc9cd4df0f679770cd4c9b99f699da6c7a050fcc25f1d6cd51c0ed3486ce0b3788ef00cad326380f749a7c0d063753667d13841af9aa740d455567d1cde517e204a79df8e9b53503d3faa29265e1d8717caefe56516c1c8b8c40a9e9e036fc4304ba2618805c2ee32b67dfe4e38c2ca021c7f3f90365012de03d6e55a440ddac53bb766dbbb329e7cc4556893822948b29378838c835f08f22111cb7bad93de999faa9a2cf054aa4f8c80acf5765f1e9cf0474cd45a35795362ff2423d59ed183379d96ab546938bfd6f5a1668361af61cf8509285c195b06c938968017b654107ac0db5a2da34104862743ddd8bf956a920f9440fcc488b596cb102b3f601dc764fabf42744b89cde2f1043c257eb56d86df2b13d62c06b0f614c7fffcb15d4a9bc9e6ce5178b9d3eede98741be01c33dff63c781c350bd48d015394a762be7f77606ec0d898395c7bfda830a1d867e9e29c2fb1a5e154cf962d08e042bda1c82bb92449eb5689688914481c15cf0d09a4f75ea40aab030743190f4ba68651ae22328ebb6cecfd060e484f6f7baee15290bd81dc27789682c14a9ab977a087b28db5da665a38465e4eeaa91d1eb6d73559d1fb22a1f09bfe2fcf5f39871e1898dcecd823e02e5d3a9445a0e6b0417f2196e2c4485e0668d4495e6ee746c5a1bf19adceb77ed4d0b331114b93708e06b110a56ef0dbcfbb310373c4f7e990641c26677fe33734e9c076aded537067c2a8a734f51e558b06cba3dda650b983e96eb0abfba3cb3ce0b04f5bcc36d6d2f0c2ec14d8cde21dda0fb8165122f3c5fa000ee309e3383717b9fb0db2b48097f49a81814e474fe4f6b29a0851a03558b431a7208d162b1cee29894fcc628df9755229187b8357482ba5775c6ca50cd9378bf9a19481179ba24caf03e962b0ecee22e673d22952bdb1525c8b652db0f9df3bdc703c2d2f87b5d63cfa70e8d6feb852a2632ae13822f10a68ed78bc7cd2e712d7cb5a00e59023426c2e0d980c511035180c7d1e84030c611179afe4e49b16bae90dce8f8afc733d29a1e1f1008f7845379d3a520687c6f1c4fc8cf9274f27965baac25f45861f47b1a0794b57082d5453733bda18b0885cbf9ad1b2f241fb0a463dd059878e4addc1553439c268f5a8e3c9c457bd1643a9f8d5ebd3fd3af36b83c76ef671331260270bf429e289309c1f9333f6a7c0ecae750b28e224ae6f698540c3c282c9a2d9a39e44771eeac64b10d244633231dde43e513fb923db34111c0fd6cd0c112c1a740fc07895191d17723619b0c613603f5e02a880d57f6c65934544aab19c0a3d5004bc06f628d3b1c7fc21e20e74474bf345eab39688c6e41bd6ad0647c19b7a1eb0f99e7b79dc8c0a367f64abf897666b7b69b42e5dff4267a6c7e9fb81090aa950d91b93d5eda7786ad9f5f8118f4477b46b69a19831f60b0203948a5cd615ec7e09abaffe84717846dd744fe1843f1710ea00597f910a412ba72c0875eb1ca250718204716381ed1a863e5fe062842c304c7aff64280f56b271432c9dd974bb34796c61f3ec0410e2c84ac62c6415d3fc03ddba469566f38f866b3b9181635c626ea959e757069e7a6f194d899556a759ef0dfb085986e70c760fa022e22d300a88169c149e2025f4ddc8ead610d430c532c43e9f292bfa7c1951e7dddd6b3d10b72928da09fde6d18c848fb84e9445a1b4f16faa5a8ad255025cfeecadd09bcfa868bd1bdaeffc875a045e736702d67b560677b305d62daec786f05e45367a44ee1aa11c80e5c639c02aa7bcd365960e7e9a156301ba17b497f97dbdf7bc4ef8ad326869ead46925f33bb77b574ef3552a867e87016c4cc247c3047323e05d24a8e65179a4b906ce4a2b2f04d70c864245662d1b2c4c8fbb9a112ad31d9c261e214d0a67b95fac910487cae38f9e71483d90bb999a37bed3320dd0d57425c64d375ae5e7aaf8da3f699f2bb3ee30fe2e1560eb44f19d447ec3e6a7886756abeb93b166f0a14d40ab642325e3cceb032bee85418f8011e794fb5f0bfd3647e034ff154d7f2b38cf3e72c112d47c52666602ebd788338f3eba941f4e3281f2328a18d3ec35e56b5d26c8448eccc0dc21db78dc43e12cf6ffd35456157a9ddb1296e3eb1f84ca880c475f8daa608da33912d5c38a1d72143b1ae481b6b1fa336a421564b2e924d9b64996966dc509eaf239bc33bb2f4df6ab163c3b0d42e575fffcf3a6005b031b92bc36f3cb9bd99f6bb6e8c74450cc1c5fdea835ac381f705d6f5dd94c0ac294b759a18232aa2795509177d2e54c6db461a0258ed4a0f97c0c7ae3dd8f301b028e8c5781ef55148b36a04d90ca76e1ec14815b620506d080917fa029d25ed6eea7daad23d70a1c9386e86683259f0007ffb1fe80b0ff68781f7c8850792d839104afefc18b60130a33f412a96be2d62ec845a9ae629437c8b4d50f5cc32e9ed2099dd3e1a8e389294c219813dc35bcdc77d336686770fa00e6b9e204f0d20152fbddac4f2c265ecea0456b227a48a0c50425a9476b77cbcab3f04bfe9d940b68f5b79f743a05563fd52f33751f0d73f72eb89685830b9595aaaa92695f961f4a8e051a8abe6455cbe155f36b59063130ba6a33375200d243d449d189e3d53682561ff95ff28f9da58edbf9634c4dc4ea594f532f402a66669dfdc3d03cc010c6ea54ebed0a3beffcd137015264909c57d4d65f5bf5133561afef969f0a7f3ff8aa5eac7a66dc1366c2d6e5cd44feab669a31ebd7f6f4a642a1b83560fadeeeac990449b974409dd9b04d0d33ea1365327446bdb0a6ff95d9577b4ef89106dbb05e21d4c56240d535e6da35faa1c4cbd340dd847b7a003a3514efd2ff148d72fd87dc065c4c345bfd3cd53f338470f3f8f7e72ca83c627e3f039f6aa891a5716ff376f6bc1be7da3220b6dc1386d1233a1399d6eda6bbf788c9fdf32fbb0478d11de70d255243e7b7712386d64a7c8d0f2de26b2ff54c4f6862d53112e0238e3d8819f7dd97efa41b56ba0d6b9755e961ad3a91a011ecb307f79440bc5c61277b23efe5b0e44a0568904a318f0f7ac6cbed168ff93fffb1efe9c4dd01bd77ac3f040bda1af7dea2912888b6daffc68b8fc7529458b2765c60c620b021d8079362c04bc41e821e99f6d4298b1aad6893405cce932e6a7dcc9a54942a9c73f525e3cecbc8ad05bb8adc89950c197f82e2f031b983e9dc42d166b59704084988a373bdfdf16b858693c12d7b72f88e148572bf765cb75ba4ac7b79b525b8511811f8a8d7a8a8185f6cb2231638c69b77c449b59d25595053b08f073013af4215a32cd7e77b7fd12fe543aa5211cf5567e0e0a4445f74a65c54de61532877b85bdf78ecca219756541aefbdce07bb5b90e892632151535563ba680b92b89aff92beef293caedba5682c98272b196fc9d0685633ca7568cc89dfb01332a381151eb544d0f7a14e5d85bba335ed203607eea866a93"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r19=>0x0, ""/256, <r20=>0x0, <r21=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000ac0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r20}], 0x0, "46dacd8396fe92"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000509c0)={0xfff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}, {r3, r4}, {0x0, r7}, {r8, r11}, {r13}, {}, {}, {r15, r16}, {r17}, {r18}, {}, {r19}], 0xb0, "e4875d44910861"})

07:14:33 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 15)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:33 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:14:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r0)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x000\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000fcdbdf250300000014000100fc0200000000000000000000000000011000040007000000030000004202000005000600000000000800030040000000"], 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000001)

[ 2104.879698] FAULT_INJECTION: forcing a failure.
[ 2104.879698] name failslab, interval 1, probability 0, space 0, times 0
[ 2104.881539] CPU: 0 PID: 59608 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2104.882543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2104.883728] Call Trace:
[ 2104.884111]  dump_stack+0x107/0x167
[ 2104.884633]  should_fail.cold+0x5/0xa
[ 2104.885177]  ? create_object.isra.0+0x3a/0xa20
[ 2104.885833]  should_failslab+0x5/0x20
[ 2104.886387]  kmem_cache_alloc+0x5b/0x310
[ 2104.886972]  create_object.isra.0+0x3a/0xa20
[ 2104.887601]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2104.888328]  __kmalloc_node+0x1ae/0x420
[ 2104.888910]  kvmalloc_node+0x119/0x170
[ 2104.889477]  alloc_fdtable+0xd3/0x280
[ 2104.890026]  dup_fd+0x92e/0xf40
[ 2104.890506]  copy_process+0x197c/0x78b0
[ 2104.891078]  ? __lock_acquire+0xbb1/0x5b00
[ 2104.891691]  ? __cleanup_sighand+0xb0/0xb0
[ 2104.892297]  ? lock_acquire+0x197/0x470
[ 2104.892865]  ? find_held_lock+0x2c/0x110
[ 2104.893447]  kernel_clone+0xe7/0x980
[ 2104.893974]  ? lock_downgrade+0x6d0/0x6d0
[ 2104.894578]  ? find_held_lock+0x2c/0x110
[ 2104.895153]  ? create_io_thread+0xf0/0xf0
[ 2104.895757]  ? ksys_write+0x12d/0x260
[ 2104.896307]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2104.897000]  __do_sys_fork+0x8a/0xc0
[ 2104.897530]  ? kernel_thread+0xf0/0xf0
[ 2104.898096]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2104.898843]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2104.899575]  ? trace_hardirqs_on+0x5b/0x180
[ 2104.900188]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2104.900919]  do_syscall_64+0x33/0x40
[ 2104.901446]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2104.902189] RIP: 0033:0x7f46dde30b19
[ 2104.902717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2104.905344] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2104.906428] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2104.907433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2104.908442] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2104.909449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2104.910466] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2104.917935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2104.918996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2104.920163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:14:33 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2105.098525] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:14:52 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:14:52 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2123.294520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2123.300626] FAULT_INJECTION: forcing a failure.
[ 2123.300626] name failslab, interval 1, probability 0, space 0, times 0
[ 2123.302743] CPU: 1 PID: 59949 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2123.303911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2123.305313] Call Trace:
[ 2123.305762]  dump_stack+0x107/0x167
[ 2123.306399]  should_fail.cold+0x5/0xa
[ 2123.307042]  ? kvmalloc_node+0x119/0x170
[ 2123.307746]  should_failslab+0x5/0x20
[ 2123.308391]  __kmalloc_node+0x76/0x420
[ 2123.309049]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2123.309906]  kvmalloc_node+0x119/0x170
[ 2123.310578]  alloc_fdtable+0x13f/0x280
[ 2123.311245]  dup_fd+0x92e/0xf40
[ 2123.311818]  copy_process+0x197c/0x78b0
[ 2123.312490]  ? __lock_acquire+0xbb1/0x5b00
[ 2123.313215]  ? __cleanup_sighand+0xb0/0xb0
[ 2123.313936]  ? lock_acquire+0x197/0x470
[ 2123.314623]  ? find_held_lock+0x2c/0x110
[ 2123.315313]  kernel_clone+0xe7/0x980
[ 2123.315950]  ? lock_downgrade+0x6d0/0x6d0
[ 2123.316662]  ? find_held_lock+0x2c/0x110
[ 2123.317349]  ? create_io_thread+0xf0/0xf0
[ 2123.318049]  ? ksys_write+0x12d/0x260
[ 2123.318701]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2123.319519]  __do_sys_fork+0x8a/0xc0
[ 2123.320126]  ? kernel_thread+0xf0/0xf0
[ 2123.320782]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.321649]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.322524]  ? trace_hardirqs_on+0x5b/0x180
[ 2123.323260]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.324138]  do_syscall_64+0x33/0x40
[ 2123.324764]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2123.325883] RIP: 0033:0x7f46dde30b19
[ 2123.326662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2123.329782] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2123.331076] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2123.332281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2123.333493] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2123.334679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2123.335878] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2123.353540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:14:52 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 16)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0xaa5}}, './cgroup/cgroup.procs\x00'})
sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c805}, 0x880c)

07:14:52 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 12)

07:14:52 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:14:52 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:14:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x120, 0x10, 0x800, 0x70bd2b, 0x25dfdbfe, {0x7}, [@typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}, @typed={0x5, 0x31, 0x0, 0x0, @str='\x00'}, @nested={0xfc, 0x62, 0x0, 0x1, [@typed={0x14, 0x76, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0x6a}, @typed={0x8, 0x5f, 0x0, 0x0, @ipv4=@multicast2}, @generic="8c0139174e3ddf02d5988a44538857167b11f49978bc480f537b152121b84ee60ef40ca48d18b838e0d5b43512ccdfe61fb269910ccbb5fab459b5348b57fdf57058b3ead4b06848ae442799e434546c74673842a5f6bae09db785731b5b883861c6d66b4ec3f9116fa147b33134f3ec79650cea1bca7d525843f8444d1344434b5545ef65cb6c59cd3abdcbfc7defdd4ecb1dc719a1f618932ff05489d6bd11e1e8fceb67d88f463b0bdb28f10e49ca248eb96ce7ad382cfac3769f84e11809f42667481bc44fab12b48507ee7306ad97b907c843d75bdc"]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8}, 0x4)

07:14:52 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 17)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2123.429765] FAULT_INJECTION: forcing a failure.
[ 2123.429765] name failslab, interval 1, probability 0, space 0, times 0
[ 2123.431763] CPU: 1 PID: 60115 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2123.432860] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2123.434167] Call Trace:
[ 2123.434598]  dump_stack+0x107/0x167
[ 2123.435169]  should_fail.cold+0x5/0xa
[ 2123.435781]  ? kvmalloc_node+0x119/0x170
[ 2123.436431]  should_failslab+0x5/0x20
[ 2123.437030]  __kmalloc_node+0x76/0x420
[ 2123.437658]  kvmalloc_node+0x119/0x170
[ 2123.438281]  alloc_fdtable+0xd3/0x280
[ 2123.438884]  dup_fd+0x92e/0xf40
[ 2123.439421]  copy_process+0x197c/0x78b0
[ 2123.440050]  ? __lock_acquire+0xbb1/0x5b00
[ 2123.440739]  ? __cleanup_sighand+0xb0/0xb0
[ 2123.441418]  ? lock_acquire+0x197/0x470
[ 2123.442046]  ? find_held_lock+0x2c/0x110
[ 2123.442703]  kernel_clone+0xe7/0x980
[ 2123.443287]  ? lock_downgrade+0x6d0/0x6d0
[ 2123.443936]  ? find_held_lock+0x2c/0x110
[ 2123.444578]  ? create_io_thread+0xf0/0xf0
[ 2123.445234]  ? ksys_write+0x12d/0x260
[ 2123.445842]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2123.446624]  __do_sys_fork+0x8a/0xc0
[ 2123.447204]  ? kernel_thread+0xf0/0xf0
[ 2123.447821]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.448651]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.449467]  ? trace_hardirqs_on+0x5b/0x180
[ 2123.450139]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.450956]  do_syscall_64+0x33/0x40
[ 2123.451546]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2123.452353] RIP: 0033:0x7f46dde30b19
[ 2123.452933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2123.455864] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2123.457091] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2123.458196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2123.459280] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2123.460351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2123.461426] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:14:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000))

07:14:52 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 18)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:14:52 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x109502, 0x4)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r1=>r0, @ANYBLOB="04000020000000002e2f634a726f75702f6367726f7570731d81fe6373001508da70d545bbc9771f02987473e99c232d857021dd6f25fceaf85d31d53d3bc91dd62d398dcc19aa40d1069e69f92063a74e992cecd97830da21d2426e6229b1e8c93e8a328e0069346f7c8a67631c9ebe65e3c1d7742092e064c94166dd0f5eb0fcb4b04c82007473bd503be03ed8ba0085143004ff8a669becc75cd43e0d5afc964eec"])
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
clock_gettime(0x0, &(0x7f00000001c0)={<r4=>0x0, <r5=>0x0})
utimes(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000200)={{r2, r3/1000+10000}, {r4, r5/1000+10000}})
r6 = getpgrp(0x0)
pidfd_open(r6, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0)=r6, 0xfffffffffffffee5)

[ 2123.626894] FAULT_INJECTION: forcing a failure.
[ 2123.626894] name failslab, interval 1, probability 0, space 0, times 0
[ 2123.629798] CPU: 0 PID: 60256 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2123.631249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2123.632937] Call Trace:
[ 2123.633480]  dump_stack+0x107/0x167
[ 2123.634293]  should_fail.cold+0x5/0xa
[ 2123.635110]  ? create_object.isra.0+0x3a/0xa20
[ 2123.636075]  should_failslab+0x5/0x20
[ 2123.636875]  kmem_cache_alloc+0x5b/0x310
[ 2123.637723]  create_object.isra.0+0x3a/0xa20
[ 2123.638649]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2123.639695]  __kmalloc_node+0x1ae/0x420
[ 2123.640529]  kvmalloc_node+0x119/0x170
[ 2123.641362]  alloc_fdtable+0xd3/0x280
[ 2123.642140]  dup_fd+0x92e/0xf40
[ 2123.642837]  copy_process+0x197c/0x78b0
[ 2123.643663]  ? __lock_acquire+0xbb1/0x5b00
[ 2123.644548]  ? __cleanup_sighand+0xb0/0xb0
[ 2123.645422]  ? lock_acquire+0x197/0x470
[ 2123.646262]  ? find_held_lock+0x2c/0x110
[ 2123.647102]  kernel_clone+0xe7/0x980
[ 2123.647884]  ? lock_downgrade+0x6d0/0x6d0
[ 2123.648742]  ? find_held_lock+0x2c/0x110
[ 2123.649599]  ? create_io_thread+0xf0/0xf0
[ 2123.650008] FAULT_INJECTION: forcing a failure.
[ 2123.650008] name failslab, interval 1, probability 0, space 0, times 0
[ 2123.650487]  ? ksys_write+0x12d/0x260
[ 2123.650513]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2123.653815]  __do_sys_fork+0x8a/0xc0
[ 2123.654598]  ? kernel_thread+0xf0/0xf0
[ 2123.655432]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.656524]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.657587]  ? trace_hardirqs_on+0x5b/0x180
[ 2123.658490]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.659553]  do_syscall_64+0x33/0x40
[ 2123.660328]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2123.661391] RIP: 0033:0x7f46dde30b19
[ 2123.662161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2123.665991] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2123.667593] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2123.669078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2123.670615] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2123.672099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2123.673591] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2123.675210] CPU: 1 PID: 59956 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2123.676133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2123.677236] Call Trace:
[ 2123.677587]  dump_stack+0x107/0x167
[ 2123.678079]  should_fail.cold+0x5/0xa
[ 2123.678600]  should_failslab+0x5/0x20
[ 2123.679106]  __kmalloc_track_caller+0x79/0x370
[ 2123.679719]  ? kvasprintf_const+0x60/0x1a0
[ 2123.680291]  kvasprintf+0xb5/0x150
[ 2123.680769]  ? bust_spinlocks+0xe0/0xe0
[ 2123.681306]  ? mark_held_locks+0x9e/0xe0
[ 2123.681847]  ? lock_release+0x680/0x680
[ 2123.682392]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.683099]  kvasprintf_const+0x60/0x1a0
[ 2123.683651]  kobject_set_name_vargs+0x56/0x150
[ 2123.684259]  dev_set_name+0xbb/0xf0
[ 2123.684736]  ? device_initialize+0x620/0x620
[ 2123.685339]  ? kmalloc_order+0xfe/0x160
[ 2123.685893]  wiphy_new_nm+0x805/0x1e00
[ 2123.686437]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2123.687059]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.687736]  ? __local_bh_enable_ip+0x9d/0x100
[ 2123.688333]  ? trace_hardirqs_on+0x5b/0x180
[ 2123.688898]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2123.689544]  ? ____sys_sendmsg+0x70d/0x870
[ 2123.690091]  ? ___sys_sendmsg+0xf3/0x170
[ 2123.690640]  ? __sys_sendmsg+0xe5/0x1b0
[ 2123.691161]  ? do_syscall_64+0x33/0x40
[ 2123.691683]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2123.692381]  ? lock_acquire+0x197/0x470
[ 2123.692920]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2123.693539]  hwsim_new_radio_nl+0x991/0x1080
[ 2123.694132]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2123.694827]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2123.695704]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2123.696550]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2123.697179]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2123.698057]  ? cap_capable+0x1cd/0x230
[ 2123.698587]  ? ns_capable+0xe2/0x110
[ 2123.699086]  genl_rcv_msg+0x36a/0x5a0
[ 2123.699601]  ? genl_get_cmd+0x480/0x480
[ 2123.700131]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2123.700819]  ? lock_release+0x680/0x680
[ 2123.701330]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2123.701924]  netlink_rcv_skb+0x14b/0x430
[ 2123.702475]  ? genl_get_cmd+0x480/0x480
[ 2123.702990]  ? netlink_ack+0xab0/0xab0
[ 2123.703514]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2123.704098]  ? is_vmalloc_addr+0x7b/0xb0
[ 2123.704626]  genl_rcv+0x24/0x40
[ 2123.705052]  netlink_unicast+0x54e/0x800
[ 2123.705581]  ? netlink_attachskb+0x870/0x870
[ 2123.706152]  netlink_sendmsg+0x90f/0xe00
[ 2123.706681]  ? netlink_unicast+0x800/0x800
[ 2123.707230]  ? netlink_unicast+0x800/0x800
[ 2123.707784]  __sock_sendmsg+0x154/0x190
[ 2123.708296]  ____sys_sendmsg+0x70d/0x870
[ 2123.708820]  ? sock_write_iter+0x3d0/0x3d0
[ 2123.709376]  ? do_recvmmsg+0x6d0/0x6d0
[ 2123.709881]  ? lock_downgrade+0x6d0/0x6d0
[ 2123.710421]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2123.711114]  ___sys_sendmsg+0xf3/0x170
[ 2123.711628]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2123.712224]  ? __fget_files+0x2cf/0x520
[ 2123.712736]  ? lock_downgrade+0x6d0/0x6d0
[ 2123.713272]  ? find_held_lock+0x2c/0x110
[ 2123.713803]  ? __fget_files+0x2f8/0x520
[ 2123.714327]  ? __fget_light+0xea/0x290
[ 2123.714827]  __sys_sendmsg+0xe5/0x1b0
[ 2123.715320]  ? __sys_sendmsg_sock+0x40/0x40
[ 2123.715869]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2123.716475]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2123.717142]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2123.717796]  ? trace_hardirqs_on+0x5b/0x180
[ 2123.718361]  do_syscall_64+0x33/0x40
[ 2123.718836]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2123.719498] RIP: 0033:0x7f5927a91b19
[ 2123.719972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2123.722349] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2123.723326] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2123.724238] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2123.725147] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2123.726056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2123.726966] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2123.735935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2123.738019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2123.739937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:14:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
fsetxattr(r1, &(0x7f0000000000)=@random={'os2.', '${[[/[+\xe0]@]\x00'}, &(0x7f0000000080)=')\x00', 0x2, 0x1)

07:14:52 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2123.804398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:14:52 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2123.819587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2123.853790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2123.855405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2123.859774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:15:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000100)={{0x0, 0x0, 0x7f, 0x3f, 0xfe8, 0x0, 0x7, 0xffffffff, 0xd4, 0x80000001, 0x400, 0x7, 0x5, 0x8, 0x7}})
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:15:07 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet(0x2, 0x5, 0x30)
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
r2 = signalfd4(r0, &(0x7f0000000080)={[0x5]}, 0x8, 0x80800)
move_mount(r1, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', r2, &(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x2)

07:15:07 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xb, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:15:07 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:15:07 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e951617", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:15:07 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 13)

07:15:07 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 19)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:07 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

[ 2138.382711] FAULT_INJECTION: forcing a failure.
[ 2138.382711] name failslab, interval 1, probability 0, space 0, times 0
[ 2138.384514] CPU: 0 PID: 60681 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2138.385581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2138.386870] Call Trace:
[ 2138.387301]  dump_stack+0x107/0x167
[ 2138.387899]  should_fail.cold+0x5/0xa
[ 2138.388521]  ? create_object.isra.0+0x3a/0xa20
[ 2138.389260]  should_failslab+0x5/0x20
[ 2138.389873]  kmem_cache_alloc+0x5b/0x310
[ 2138.390529]  ? vsnprintf+0x4ba/0x1600
[ 2138.391149]  create_object.isra.0+0x3a/0xa20
[ 2138.391861]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2138.392687]  __kmalloc_track_caller+0x177/0x370
[ 2138.393447]  ? kvasprintf_const+0x60/0x1a0
[ 2138.394132]  kvasprintf+0xb5/0x150
[ 2138.394708]  ? bust_spinlocks+0xe0/0xe0
[ 2138.395347]  ? lock_release+0x680/0x680
[ 2138.395976]  ? find_held_lock+0x2c/0x110
[ 2138.396646]  kvasprintf_const+0x60/0x1a0
[ 2138.397296]  kobject_set_name_vargs+0x56/0x150
[ 2138.398031]  dev_set_name+0xbb/0xf0
[ 2138.398623]  ? device_initialize+0x620/0x620
[ 2138.399323]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2138.400176]  ? kmalloc_order+0xfe/0x160
[ 2138.400824]  wiphy_new_nm+0x805/0x1e00
[ 2138.401449]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2138.402198]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2138.403050]  ? __local_bh_enable_ip+0x9d/0x100
[ 2138.403790]  ? trace_hardirqs_on+0x5b/0x180
[ 2138.404486]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2138.405284]  ? ____sys_sendmsg+0x70d/0x870
[ 2138.405970]  ? ___sys_sendmsg+0xf3/0x170
[ 2138.406633]  ? __sys_sendmsg+0xe5/0x1b0
[ 2138.407282]  ? do_syscall_64+0x33/0x40
[ 2138.407919]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2138.408767]  ? lock_acquire+0x197/0x470
[ 2138.409409]  ? create_object.isra.0+0x3ad/0xa20
[ 2138.410167]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2138.410945]  hwsim_new_radio_nl+0x991/0x1080
[ 2138.411663]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2138.412514]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2138.413588]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2138.414654]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2138.415427]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2138.416486]  ? cap_capable+0x1cd/0x230
[ 2138.417099]  ? ns_capable+0xe2/0x110
[ 2138.417698]  genl_rcv_msg+0x36a/0x5a0
[ 2138.418304]  ? genl_get_cmd+0x480/0x480
[ 2138.418949]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2138.419059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2138.419761]  ? lock_release+0x680/0x680
[ 2138.419774]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2138.419791]  netlink_rcv_skb+0x14b/0x430
[ 2138.419805]  ? genl_get_cmd+0x480/0x480
[ 2138.419820]  ? netlink_ack+0xab0/0xab0
[ 2138.419840]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2138.419853]  ? is_vmalloc_addr+0x7b/0xb0
[ 2138.419869]  genl_rcv+0x24/0x40
[ 2138.419882]  netlink_unicast+0x54e/0x800
[ 2138.419902]  ? netlink_attachskb+0x870/0x870
[ 2138.428283]  netlink_sendmsg+0x90f/0xe00
[ 2138.428936]  ? netlink_unicast+0x800/0x800
[ 2138.429622]  ? netlink_unicast+0x800/0x800
[ 2138.430291]  __sock_sendmsg+0x154/0x190
[ 2138.430920]  ____sys_sendmsg+0x70d/0x870
[ 2138.431554]  ? sock_write_iter+0x3d0/0x3d0
[ 2138.432202]  ? do_recvmmsg+0x6d0/0x6d0
[ 2138.432828]  ? lock_downgrade+0x6d0/0x6d0
[ 2138.433499]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2138.434337]  ___sys_sendmsg+0xf3/0x170
[ 2138.434977]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2138.435715]  ? __fget_files+0x2cf/0x520
[ 2138.436352]  ? lock_downgrade+0x6d0/0x6d0
[ 2138.437012]  ? find_held_lock+0x2c/0x110
[ 2138.437647]  ? __fget_files+0x2f8/0x520
[ 2138.438267]  ? __fget_light+0xea/0x290
[ 2138.438914]  __sys_sendmsg+0xe5/0x1b0
[ 2138.439500]  ? __sys_sendmsg_sock+0x40/0x40
[ 2138.440173]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2138.440908]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2138.441735]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2138.442531]  ? trace_hardirqs_on+0x5b/0x180
[ 2138.443223]  do_syscall_64+0x33/0x40
[ 2138.443801]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2138.444630] RIP: 0033:0x7f5927a91b19
[ 2138.445231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2138.448101] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2138.449302] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2138.450440] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2138.451556] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2138.452685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2138.453804] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2138.467184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2138.481078] FAULT_INJECTION: forcing a failure.
[ 2138.481078] name failslab, interval 1, probability 0, space 0, times 0
[ 2138.483009] CPU: 0 PID: 60750 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2138.484047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2138.485309] Call Trace:
[ 2138.485712]  dump_stack+0x107/0x167
[ 2138.486256]  should_fail.cold+0x5/0xa
[ 2138.486855]  ? create_object.isra.0+0x3a/0xa20
[ 2138.487534]  should_failslab+0x5/0x20
[ 2138.488099]  kmem_cache_alloc+0x5b/0x310
[ 2138.488722]  create_object.isra.0+0x3a/0xa20
[ 2138.489387]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2138.490142]  kmem_cache_alloc+0x159/0x310
[ 2138.490772]  copy_fs_struct+0x45/0x340
[ 2138.491354]  copy_process+0x34b1/0x78b0
[ 2138.491957]  ? __lock_acquire+0xbb1/0x5b00
[ 2138.492618]  ? __cleanup_sighand+0xb0/0xb0
[ 2138.493259]  ? lock_acquire+0x197/0x470
[ 2138.493855]  ? find_held_lock+0x2c/0x110
[ 2138.494469]  kernel_clone+0xe7/0x980
[ 2138.495023]  ? lock_downgrade+0x6d0/0x6d0
[ 2138.495657]  ? find_held_lock+0x2c/0x110
[ 2138.496255]  ? create_io_thread+0xf0/0xf0
[ 2138.496876]  ? ksys_write+0x12d/0x260
[ 2138.497455]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2138.498169]  __do_sys_fork+0x8a/0xc0
[ 2138.498726]  ? kernel_thread+0xf0/0xf0
[ 2138.499308]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2138.500081]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2138.500843]  ? trace_hardirqs_on+0x5b/0x180
[ 2138.501479]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2138.502236]  do_syscall_64+0x33/0x40
[ 2138.502802]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2138.503555] RIP: 0033:0x7f46dde30b19
[ 2138.504103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2138.506831] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2138.507952] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2138.509011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2138.510071] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2138.511136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2138.512196] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:07 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 20)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:07 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={<r2=>0x0}, &(0x7f0000000080)=0xc)
write$cgroup_pid(r0, &(0x7f00000000c0)=r2, 0x12)

07:15:07 executing program 1:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
write$9p(r0, &(0x7f0000000600)="05b5295c54876e127ebdc7948be63d6cfa436b8caea9ec76e8f46ab5f4f07a040687a14423e9468083a4c3684dffd581caac513caf7b09fb9a797ca4193b5e204503b589a001fbbc74ab6bf356d5bdd3752229df23fce66d2dd18df416397455965eebdb70e2d33d9d2639ad79c93978c9af90310d822b416b623b8eb0c7518f6796ddfb1877b8b5a4b4e0f85b9732f46017e4408575a480f9015486a865e4032f12e62a49b6baf53df7382a9ce86c692743fa0553a353fcdfc80cd4992287e5105c1383e9092ed89f4aea045f2d", 0xce)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, r2, 0x1, 0x4, 0x6, @remote}, 0x14)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x63a600, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@loopback, @private2, @mcast1, 0xeaa, 0x73d, 0x3, 0x100, 0x3ff, 0x80, r2})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b0, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x1b0}}, 0x10)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)

[ 2138.691506] FAULT_INJECTION: forcing a failure.
[ 2138.691506] name failslab, interval 1, probability 0, space 0, times 0
[ 2138.693103] CPU: 0 PID: 60969 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2138.694020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2138.695140] Call Trace:
[ 2138.695498]  dump_stack+0x107/0x167
[ 2138.695993]  should_fail.cold+0x5/0xa
[ 2138.696503]  ? copy_process+0x1ae7/0x78b0
[ 2138.697062]  should_failslab+0x5/0x20
[ 2138.697577]  kmem_cache_alloc+0x5b/0x310
[ 2138.698112]  ? _raw_spin_unlock+0x1a/0x30
[ 2138.698673]  copy_process+0x1ae7/0x78b0
[ 2138.699211]  ? __lock_acquire+0xbb1/0x5b00
[ 2138.699798]  ? __cleanup_sighand+0xb0/0xb0
[ 2138.700364]  ? lock_acquire+0x197/0x470
[ 2138.700899]  ? find_held_lock+0x2c/0x110
[ 2138.701441]  kernel_clone+0xe7/0x980
[ 2138.701933]  ? lock_downgrade+0x6d0/0x6d0
[ 2138.702491]  ? find_held_lock+0x2c/0x110
[ 2138.703030]  ? create_io_thread+0xf0/0xf0
[ 2138.703583]  ? ksys_write+0x12d/0x260
[ 2138.704090]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2138.704728]  __do_sys_fork+0x8a/0xc0
[ 2138.705218]  ? kernel_thread+0xf0/0xf0
[ 2138.705740]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2138.706458]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2138.707139]  ? trace_hardirqs_on+0x5b/0x180
[ 2138.707719]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2138.708401]  do_syscall_64+0x33/0x40
[ 2138.708894]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2138.709571] RIP: 0033:0x7f46dde30b19
[ 2138.710060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2138.712499] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2138.713509] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2138.714457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2138.715400] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2138.716351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2138.717287] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:07 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 14)

[ 2138.834546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2138.836469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2138.838190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:15:07 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:15:07 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 21)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:07 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:15:07 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:15:07 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e951617", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2139.062993] FAULT_INJECTION: forcing a failure.
[ 2139.062993] name failslab, interval 1, probability 0, space 0, times 0
[ 2139.064574] CPU: 0 PID: 61115 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2139.065364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2139.066325] Call Trace:
[ 2139.066646]  dump_stack+0x107/0x167
[ 2139.067078]  should_fail.cold+0x5/0xa
[ 2139.067523]  ? create_object.isra.0+0x3a/0xa20
[ 2139.068038]  should_failslab+0x5/0x20
[ 2139.068472]  kmem_cache_alloc+0x5b/0x310
[ 2139.068949]  create_object.isra.0+0x3a/0xa20
[ 2139.069468]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2139.070051]  kmem_cache_alloc+0x159/0x310
[ 2139.070537]  copy_process+0x1ae7/0x78b0
[ 2139.070993]  ? __lock_acquire+0xbb1/0x5b00
[ 2139.071478]  ? __cleanup_sighand+0xb0/0xb0
[ 2139.071958]  ? lock_acquire+0x197/0x470
[ 2139.072411]  ? find_held_lock+0x2c/0x110
[ 2139.072878]  kernel_clone+0xe7/0x980
[ 2139.073303]  ? lock_downgrade+0x6d0/0x6d0
[ 2139.073765]  ? find_held_lock+0x2c/0x110
[ 2139.074219]  ? create_io_thread+0xf0/0xf0
[ 2139.074704]  ? ksys_write+0x12d/0x260
[ 2139.075147]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2139.075701]  __do_sys_fork+0x8a/0xc0
[ 2139.076122]  ? kernel_thread+0xf0/0xf0
[ 2139.076579]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2139.077181]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2139.077766]  ? trace_hardirqs_on+0x5b/0x180
[ 2139.078253]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2139.078862]  do_syscall_64+0x33/0x40
[ 2139.079285]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2139.079892] RIP: 0033:0x7f46dde30b19
[ 2139.080311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2139.082386] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2139.083265] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2139.084078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2139.084886] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2139.085705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2139.086524] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2139.089835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2139.198986] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:15:08 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 22)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2139.225106] FAULT_INJECTION: forcing a failure.
[ 2139.225106] name failslab, interval 1, probability 0, space 0, times 0
[ 2139.226590] CPU: 0 PID: 61124 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2139.227379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2139.228328] Call Trace:
[ 2139.228634]  dump_stack+0x107/0x167
[ 2139.229054]  should_fail.cold+0x5/0xa
[ 2139.229491]  ? rfkill_alloc+0xa6/0x2c0
[ 2139.229938]  should_failslab+0x5/0x20
[ 2139.230383]  __kmalloc+0x72/0x390
[ 2139.230783]  rfkill_alloc+0xa6/0x2c0
[ 2139.231214]  wiphy_new_nm+0x12a3/0x1e00
[ 2139.231669]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2139.232202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2139.232805]  ? __local_bh_enable_ip+0x9d/0x100
[ 2139.233331]  ? trace_hardirqs_on+0x5b/0x180
[ 2139.233825]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2139.234399]  ? __nla_validate_parse+0xbcd/0x2b10
[ 2139.234943]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2139.235479]  hwsim_new_radio_nl+0x991/0x1080
[ 2139.235981]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2139.236578]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2139.237328]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2139.238071]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2139.238633]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2139.239382]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2139.239993]  ? cap_capable+0x1cd/0x230
[ 2139.240439]  ? ns_capable+0xe2/0x110
[ 2139.240866]  genl_rcv_msg+0x36a/0x5a0
[ 2139.241301]  ? genl_get_cmd+0x480/0x480
[ 2139.241754]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2139.242344]  ? lock_release+0x680/0x680
[ 2139.242807]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2139.243323]  netlink_rcv_skb+0x14b/0x430
[ 2139.243788]  ? genl_get_cmd+0x480/0x480
[ 2139.244254]  ? netlink_ack+0xab0/0xab0
[ 2139.244700]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2139.245217]  ? is_vmalloc_addr+0x7b/0xb0
[ 2139.245679]  genl_rcv+0x24/0x40
[ 2139.246057]  netlink_unicast+0x54e/0x800
[ 2139.246531]  ? netlink_attachskb+0x870/0x870
[ 2139.247039]  netlink_sendmsg+0x90f/0xe00
[ 2139.247503]  ? netlink_unicast+0x800/0x800
[ 2139.247986]  ? netlink_unicast+0x800/0x800
[ 2139.248468]  __sock_sendmsg+0x154/0x190
[ 2139.248920]  ____sys_sendmsg+0x70d/0x870
[ 2139.249387]  ? sock_write_iter+0x3d0/0x3d0
[ 2139.249866]  ? do_recvmmsg+0x6d0/0x6d0
[ 2139.250311]  ? lock_downgrade+0x6d0/0x6d0
[ 2139.250792]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2139.251388]  ___sys_sendmsg+0xf3/0x170
[ 2139.251832]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2139.252361]  ? __fget_files+0x2cf/0x520
[ 2139.252815]  ? lock_downgrade+0x6d0/0x6d0
[ 2139.253284]  ? find_held_lock+0x2c/0x110
[ 2139.253750]  ? __fget_files+0x2f8/0x520
[ 2139.254203]  ? __fget_light+0xea/0x290
[ 2139.254657]  __sys_sendmsg+0xe5/0x1b0
[ 2139.255095]  ? __sys_sendmsg_sock+0x40/0x40
[ 2139.255587]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2139.256131]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2139.256728]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2139.257305]  ? trace_hardirqs_on+0x5b/0x180
[ 2139.257798]  do_syscall_64+0x33/0x40
[ 2139.258221]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2139.258806] RIP: 0033:0x7f5927a91b19
[ 2139.259229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2139.261319] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2139.262190] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2139.263009] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2139.263822] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2139.264635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2139.265445] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2139.272003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2139.274253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
07:15:08 executing program 0:
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="24020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x881}, 0x8000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x17, 0x35, &(0x7f0000000000)="fcc28a9a25fdffdd1d7a26c9ee4921ff21f01afa4f0e2e01827fe7df8a4e7cb372e412d02c33d10ccc309b8ca38774c29cb83fe845"})

[ 2139.292772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:15:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40102, 0x2)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
sendmsg$inet6(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x3, @mcast2, 0x26}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000100)="0d90edfd35f3e7cffad1b9dcbdf5a26a477e90e6ed94b455f89c8a893f4f65c1ec358771eb6d6bae1976b7f79fb054c42c3435cab5f3050b8176b1ef704bc6f7b08ed6129ab4ea9bb76850210e1f92fa68d6a6d3da9e650f32533251bf46fb9c3a02f24be88ce218ca2730d7d1144710648b9717f4954fe0ffdcca4d191b7878549176864945b2470b3da6ebb079d401fcc52c44970d8662746442f0d9dabca782ccad21e53e7fb715db775250df2a8ce8cc6ddc7f9ab9f048672d9baeb1e1df4de67e6e02994b38f152ba5acd5c47dd2547", 0xd2}, {&(0x7f0000000200)="09d1b440abb29af0c93a16dce5de2e3ee870a34057e27d67c189f6e361ea34bd1c76196bb45b2e48e3cf0762c4d041410f3c976e1ead8f5410c36620d3fbd948ce78be", 0x43}, {&(0x7f0000000280)="b93784c4cdbb38ce1b24d8c61e151576bcda42c47303d5c3d90943dc", 0x1c}, {&(0x7f00000002c0)="e87c9bd94879507dcd27e0c607d8514d1f5b389986ddc2d2365a9b064751acc291dd220259ca405797ddaa69dec20352c10c6443c9e3fc96adb0a069c2b930afba341035c449ed", 0x47}, {&(0x7f0000000340)="cffbc055889ee30aaa4086951f4d1400", 0x10}, {&(0x7f0000000380)="bb47b7ee1c66e07f62b9476a7b362236fc6282eabc1290f7bcbfc3ac3d8a5dab011bf25555921779e3eb719f94892afaa686e14d61b962797eefa7dea7c964a624367ac604e8b871f1dadf187240b35c930ec79bb995595d75306fcd02cc651a8b8dbf1f469d4882131df7d0224fc083abc4aa1a12da6755596f49bb7acea981d7fef888b1e602f6d1cc272d59d3b015258a46d2e53ec40559b4d59c22997c882c5bea57f18fb61e6a3225681c6c8651451f0644403951939e6c8144897dabaed0826d086f6fa76c936eafcf6b4e83d54222669e4ed3c5", 0xd7}, {&(0x7f0000000480)="d13e85715ebed75f8edc015bc904b5198408981d0c17dc30e7a65ae565f9f17e22c91503d40641cc3a8d545671383724f65fafb44e868e2498d8fc3bf8dae8395f1a451a9c32694f95", 0x49}], 0x7, &(0x7f0000000580)=[@hopopts={{0x28, 0x29, 0x36, {0x33, 0x1, '\x00', [@pad1, @calipso={0x7, 0x8, {0x0, 0x0, 0x1, 0x6}}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x0, 0x7f, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x33, 0xa, 0x1, 0x1, 0x0, [@private2, @empty, @remote, @rand_addr=' \x01\x00', @remote]}}}], 0x118}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='timerslack_ns\x00')
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wg2\x00'})
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

[ 2139.347767] FAULT_INJECTION: forcing a failure.
[ 2139.347767] name failslab, interval 1, probability 0, space 0, times 0
[ 2139.349319] CPU: 0 PID: 61532 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2139.350101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2139.351056] Call Trace:
[ 2139.351360]  dump_stack+0x107/0x167
[ 2139.351781]  should_fail.cold+0x5/0xa
[ 2139.352214]  ? copy_process+0x1c65/0x78b0
[ 2139.352691]  should_failslab+0x5/0x20
[ 2139.353124]  kmem_cache_alloc+0x5b/0x310
[ 2139.353587]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2139.354181]  copy_process+0x1c65/0x78b0
[ 2139.354640]  ? __lock_acquire+0xbb1/0x5b00
[ 2139.355130]  ? __cleanup_sighand+0xb0/0xb0
[ 2139.355624]  ? lock_acquire+0x197/0x470
[ 2139.356077]  ? find_held_lock+0x2c/0x110
[ 2139.356539]  kernel_clone+0xe7/0x980
[ 2139.356966]  ? lock_downgrade+0x6d0/0x6d0
[ 2139.357443]  ? find_held_lock+0x2c/0x110
[ 2139.357903]  ? create_io_thread+0xf0/0xf0
[ 2139.358387]  ? ksys_write+0x12d/0x260
[ 2139.358826]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2139.359382]  __do_sys_fork+0x8a/0xc0
[ 2139.359805]  ? kernel_thread+0xf0/0xf0
[ 2139.360253]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2139.360849]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2139.361433]  ? trace_hardirqs_on+0x5b/0x180
[ 2139.361927]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2139.362516]  do_syscall_64+0x33/0x40
[ 2139.362941]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2139.363525] RIP: 0033:0x7f46dde30b19
[ 2139.363951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2139.366057] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2139.366938] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2139.367753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2139.368565] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2139.369376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2139.370190] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:08 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xd, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

[ 2156.019403] FAULT_INJECTION: forcing a failure.
[ 2156.019403] name failslab, interval 1, probability 0, space 0, times 0
[ 2156.020902] CPU: 0 PID: 61845 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2156.021690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2156.022639] Call Trace:
[ 2156.022949]  dump_stack+0x107/0x167
[ 2156.023363]  should_fail.cold+0x5/0xa
[ 2156.023800]  ? create_object.isra.0+0x3a/0xa20
[ 2156.024320]  should_failslab+0x5/0x20
[ 2156.024751]  kmem_cache_alloc+0x5b/0x310
[ 2156.025216]  create_object.isra.0+0x3a/0xa20
[ 2156.025711]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2156.026288]  kmem_cache_alloc+0x159/0x310
[ 2156.026772]  copy_process+0x1c65/0x78b0
[ 2156.027229]  ? __lock_acquire+0xbb1/0x5b00
[ 2156.027718]  ? __cleanup_sighand+0xb0/0xb0
[ 2156.028201]  ? lock_acquire+0x197/0x470
[ 2156.028658]  ? find_held_lock+0x2c/0x110
[ 2156.029120]  kernel_clone+0xe7/0x980
[ 2156.029544]  ? lock_downgrade+0x6d0/0x6d0
[ 2156.030012]  ? find_held_lock+0x2c/0x110
[ 2156.030475]  ? create_io_thread+0xf0/0xf0
[ 2156.030954]  ? ksys_write+0x12d/0x260
[ 2156.031393]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2156.031945]  __do_sys_fork+0x8a/0xc0
[ 2156.032376]  ? kernel_thread+0xf0/0xf0
[ 2156.032824]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2156.033420]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2156.034004]  ? trace_hardirqs_on+0x5b/0x180
[ 2156.034501]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2156.035094]  do_syscall_64+0x33/0x40
[ 2156.035519]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2156.036105] RIP: 0033:0x7f46dde30b19
[ 2156.036530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2156.038944] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2156.039816] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2156.040631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2156.041445] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2156.042260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2156.043083] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:24 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:15:24 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000010000100000000000000009600000900050000000000000005000080480000f8bc81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3db02b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0ba78b59e433e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd71000000c935755951deec4790aad73f2a0d0ea95e61d823c36e79179362117010e45868e93f897ed1215e540cf9cb2406d5b482dbaeb2b4fab36a4c8a98b8d038b283ce03d25ddb943aad335a09f7657cb3427853035390a05fb03af610b18a1316327fde7fa56c662a5a0054b6165aba9aaa5a20b88bef58738b00000000000000000000000000a8800ef5f99b97f18e255def6d0e538155ff42dd010b1433c1731d8abb68b7bad97fa62b020388e4310e0cda29d423b00d62000000005437e92140ea8de1a1c1aa04431888e62d5591b5a3bf4bf6c4532bf4dbb405fa8c641008df4bdb1ccf17"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:15:24 executing program 0:
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0x9, 0x40, [0x9, 0x4, 0x0, 0x1ff], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff)

07:15:24 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e951617", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:15:24 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:15:24 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 15)

07:15:24 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x80)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x8000, 0xc1e2, 0x9, 0x80, 0x4})
signalfd4(r0, &(0x7f0000000000)={[0xe8]}, 0x8, 0x180800)

07:15:24 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 23)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2156.050038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2156.079537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2156.207543] FAULT_INJECTION: forcing a failure.
[ 2156.207543] name failslab, interval 1, probability 0, space 0, times 0
[ 2156.210163] CPU: 1 PID: 61854 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2156.211640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2156.213388] Call Trace:
[ 2156.213943]  dump_stack+0x107/0x167
[ 2156.214722]  should_fail.cold+0x5/0xa
[ 2156.215522]  ? create_object.isra.0+0x3a/0xa20
[ 2156.216497]  should_failslab+0x5/0x20
[ 2156.217303]  kmem_cache_alloc+0x5b/0x310
[ 2156.218162]  create_object.isra.0+0x3a/0xa20
[ 2156.219097]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2156.220167]  __kmalloc+0x16e/0x390
[ 2156.220921]  rfkill_alloc+0xa6/0x2c0
[ 2156.221714]  wiphy_new_nm+0x12a3/0x1e00
[ 2156.222564]  ieee80211_alloc_hw_nm+0x37a/0x2320
[ 2156.223552]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2156.224653]  ? __local_bh_enable_ip+0x9d/0x100
[ 2156.225617]  ? trace_hardirqs_on+0x5b/0x180
[ 2156.226527]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2156.227571]  ? ____sys_sendmsg+0x70d/0x870
[ 2156.228467]  ? ___sys_sendmsg+0xf3/0x170
[ 2156.229325]  ? __sys_sendmsg+0xe5/0x1b0
[ 2156.230158]  ? do_syscall_64+0x33/0x40
[ 2156.231009]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2156.232142]  ? create_object.isra.0+0x3ad/0xa20
[ 2156.233144]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2156.234144]  hwsim_new_radio_nl+0x991/0x1080
[ 2156.235097]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2156.236213]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2156.237598]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2156.239005]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2156.240028]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2156.241414]  ? cap_capable+0x1cd/0x230
[ 2156.242257]  ? ns_capable+0xe2/0x110
[ 2156.243056]  genl_rcv_msg+0x36a/0x5a0
[ 2156.243864]  ? genl_get_cmd+0x480/0x480
[ 2156.244711]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2156.245812]  ? lock_release+0x680/0x680
[ 2156.246663]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2156.247620]  netlink_rcv_skb+0x14b/0x430
[ 2156.248486]  ? genl_get_cmd+0x480/0x480
[ 2156.249330]  ? netlink_ack+0xab0/0xab0
[ 2156.250164]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2156.251139]  ? is_vmalloc_addr+0x7b/0xb0
[ 2156.252003]  genl_rcv+0x24/0x40
[ 2156.252704]  netlink_unicast+0x54e/0x800
[ 2156.253565]  ? netlink_attachskb+0x870/0x870
[ 2156.254513]  netlink_sendmsg+0x90f/0xe00
[ 2156.255390]  ? netlink_unicast+0x800/0x800
[ 2156.256305]  ? netlink_unicast+0x800/0x800
[ 2156.257198]  __sock_sendmsg+0x154/0x190
[ 2156.258035]  ____sys_sendmsg+0x70d/0x870
[ 2156.258911]  ? sock_write_iter+0x3d0/0x3d0
[ 2156.259800]  ? do_recvmmsg+0x6d0/0x6d0
[ 2156.260627]  ? lock_downgrade+0x6d0/0x6d0
[ 2156.261504]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2156.262621]  ___sys_sendmsg+0xf3/0x170
[ 2156.263452]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2156.264414]  ? __fget_files+0x2cf/0x520
[ 2156.265246]  ? lock_downgrade+0x6d0/0x6d0
[ 2156.266124]  ? find_held_lock+0x2c/0x110
[ 2156.266997]  ? __fget_files+0x2f8/0x520
[ 2156.267837]  ? __fget_light+0xea/0x290
[ 2156.268663]  __sys_sendmsg+0xe5/0x1b0
[ 2156.269469]  ? __sys_sendmsg_sock+0x40/0x40
[ 2156.270376]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2156.271373]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2156.272470]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2156.273564]  ? trace_hardirqs_on+0x5b/0x180
[ 2156.274478]  do_syscall_64+0x33/0x40
[ 2156.275270]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2156.276350] RIP: 0033:0x7f5927a91b19
[ 2156.277124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2156.280979] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2156.282586] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2156.284085] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2156.285596] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2156.287094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2156.288586] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2156.387032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2156.388217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2156.389104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
07:15:42 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 24)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:42 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:15:42 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 16)

07:15:42 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:15:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:15:42 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000100)={{r0}, "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"})

07:15:42 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:15:42 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

[ 2173.911735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2173.925851] FAULT_INJECTION: forcing a failure.
[ 2173.925851] name failslab, interval 1, probability 0, space 0, times 0
[ 2173.929099] CPU: 1 PID: 62276 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2173.930886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2173.932961] Call Trace:
[ 2173.933640]  dump_stack+0x107/0x167
[ 2173.934577]  should_fail.cold+0x5/0xa
[ 2173.935104] FAULT_INJECTION: forcing a failure.
[ 2173.935104] name failslab, interval 1, probability 0, space 0, times 0
[ 2173.935543]  ? kvmalloc_node+0x119/0x170
[ 2173.935565]  should_failslab+0x5/0x20
[ 2173.935584]  __kmalloc_node+0x76/0x420
[ 2173.935608]  kvmalloc_node+0x119/0x170
[ 2173.935631]  bucket_table_alloc.isra.0+0x88/0x490
[ 2173.935656]  rhashtable_init+0x341/0x760
[ 2173.942407]  rhltable_init+0x1c/0x60
[ 2173.943196]  sta_info_init+0x1f/0x110
[ 2173.943996]  ieee80211_alloc_hw_nm+0x6a0/0x2320
[ 2173.944971]  ? trace_hardirqs_on+0x5b/0x180
[ 2173.945887]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2173.946960]  ? ____sys_sendmsg+0x70d/0x870
[ 2173.947851]  ? ___sys_sendmsg+0xf3/0x170
[ 2173.948710]  ? __sys_sendmsg+0xe5/0x1b0
[ 2173.949542]  ? do_syscall_64+0x33/0x40
[ 2173.950359]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2173.951485]  ? lock_acquire+0x197/0x470
[ 2173.952322]  ? create_object.isra.0+0x3ad/0xa20
[ 2173.953305]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2173.954289]  hwsim_new_radio_nl+0x991/0x1080
[ 2173.955219]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2173.956335]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2173.957715]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2173.959099]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2173.960110]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2173.961497]  ? cap_capable+0x1cd/0x230
[ 2173.962328]  ? ns_capable+0xe2/0x110
[ 2173.963124]  genl_rcv_msg+0x36a/0x5a0
[ 2173.963924]  ? genl_get_cmd+0x480/0x480
[ 2173.964760]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2173.965843]  ? lock_release+0x680/0x680
[ 2173.966675]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2173.967629]  netlink_rcv_skb+0x14b/0x430
[ 2173.968483]  ? genl_get_cmd+0x480/0x480
[ 2173.969319]  ? netlink_ack+0xab0/0xab0
[ 2173.970139]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2173.971370]  ? is_vmalloc_addr+0x7b/0xb0
[ 2173.972488]  genl_rcv+0x24/0x40
[ 2173.973385]  netlink_unicast+0x54e/0x800
[ 2173.974474]  ? netlink_attachskb+0x870/0x870
[ 2173.975709]  netlink_sendmsg+0x90f/0xe00
[ 2173.976809]  ? netlink_unicast+0x800/0x800
[ 2173.977966]  ? netlink_unicast+0x800/0x800
[ 2173.979108]  __sock_sendmsg+0x154/0x190
[ 2173.980009]  ____sys_sendmsg+0x70d/0x870
[ 2173.981004]  ? sock_write_iter+0x3d0/0x3d0
[ 2173.981915]  ? do_recvmmsg+0x6d0/0x6d0
[ 2173.982770]  ? lock_downgrade+0x6d0/0x6d0
[ 2173.983674]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2173.984814]  ___sys_sendmsg+0xf3/0x170
[ 2173.985658]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2173.986644]  ? __fget_files+0x2cf/0x520
[ 2173.987493]  ? lock_downgrade+0x6d0/0x6d0
[ 2173.988442]  ? find_held_lock+0x2c/0x110
[ 2173.989335]  ? __fget_files+0x2f8/0x520
[ 2173.990187]  ? __fget_light+0xea/0x290
[ 2173.991057]  __sys_sendmsg+0xe5/0x1b0
[ 2173.991870]  ? __sys_sendmsg_sock+0x40/0x40
[ 2173.992794]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2173.993814]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2173.994953]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2173.996047]  ? trace_hardirqs_on+0x5b/0x180
[ 2173.996998]  do_syscall_64+0x33/0x40
[ 2173.997803]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2173.998891] RIP: 0033:0x7f5927a91b19
[ 2173.999675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.003588] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2174.005190] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2174.006700] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2174.008204] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.009697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.011230] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2174.012774] CPU: 0 PID: 62280 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2174.013790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.014952] Call Trace:
[ 2174.015328]  dump_stack+0x107/0x167
[ 2174.015843]  should_fail.cold+0x5/0xa
[ 2174.016381]  ? copy_process+0x2514/0x78b0
[ 2174.016965]  should_failslab+0x5/0x20
[ 2174.017500]  kmem_cache_alloc+0x5b/0x310
[ 2174.018068]  copy_process+0x2514/0x78b0
[ 2174.018623]  ? __lock_acquire+0xbb1/0x5b00
[ 2174.019266]  ? __cleanup_sighand+0xb0/0xb0
[ 2174.019867]  ? lock_acquire+0x197/0x470
[ 2174.020455]  ? find_held_lock+0x2c/0x110
[ 2174.021030]  kernel_clone+0xe7/0x980
[ 2174.021565]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.022142]  ? find_held_lock+0x2c/0x110
[ 2174.022747]  ? create_io_thread+0xf0/0xf0
[ 2174.023358]  ? ksys_write+0x12d/0x260
[ 2174.023939]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2174.024651]  __do_sys_fork+0x8a/0xc0
[ 2174.025194]  ? kernel_thread+0xf0/0xf0
[ 2174.025776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2174.026543]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.027312]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.027925]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.028672]  do_syscall_64+0x33/0x40
[ 2174.029211]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.029955] RIP: 0033:0x7f46dde30b19
[ 2174.030499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.033182] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2174.034285] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2174.035324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2174.036365] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.037383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.038412] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
[ 2174.045171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
07:15:42 executing program 1:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0xff24)
write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x849}}, 0x43)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
mount$9p_fd(0x0, &(0x7f0000001580)='./cgroup/cgroup.procs\x00', &(0x7f00000015c0), 0x8040c6, &(0x7f0000001600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@cache_none}, {@cache_none}, {@version_L}], [{@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'sysadm_u'}}]}})
r4 = getpgrp(0x0)
pidfd_open(r4, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)={0x13ac, 0x5, 0x5, 0x3, 0x70bd26, 0x25dfdbfe, {0xc, 0x0, 0x5}, [@generic="ddae36d7e3ff8c8b13564c77a4ae241a669880233a414afcd7111fa0aabc92d26827eb013229ba59f4703d3dc6923598368656e15a04efbb2b04d2be0a4d69041b413474a1867e836c040f9b085e5a1d20414daed63cf99f9cdd5aad1a5d84ac513946f27a5f716f009bd22e5061aacdf67ba040a13d03b7a6abdb57e00a14d2a24224372a66e59e1bfb6717ed44c3ece793df4369a72c90a1f8c1d12a22e80dabeec7a1abb8a8ea24910344d995ef029bf47cf7ead81aeaf9ae2f3e925ce925b466b0f45b18ebbb1b5230d451474ff884732ff99b9c57deb33ef465c6310fb707e49f899ed514a9d2fad4124f62d2e08df4b804e7ae3be8d13737bc8a701f8c399c0886fced7f9198c0f54ce4d55152bd2125dc130f205f89267636d62fae61587fda22ff3eff88125094766a3131738fe23dfc9be5d29e51d9f94b9463e8b9848fb56919fdbe8516b35cbb0abce8e17cbd151449cbfa82736394feb157455d399b5eb1d0e386dbee2f7418be3c2ccd6e58524312b2162fede24e919a748e447af2dd7e45696ef6a6100c99a54be12ad0f86a2603fb46724b20329428b7b8802924bec369d9e39bcd17ac03cfc2713920c66882a4fd437640f0d83b9e536b3230c3a155c03632ee779a057c94f2920d63582a029d8c401a31d08738131dc1a4193d68dc9d5392dfedc1d0f5ea8dd1322193af75b0c510af4dd0507041471459d72ffe0b32d17f95d3de3112bd3411a3b50981d313d9d9079cea58762a6967eed013cbba081195f92180f9fcce80b50d5ef820bb44d3437f3ce4576bdb5e5468cd75ea4732ece3ba4b1df687cfb1e6abd66348b9f9c2acf836de46d9d96976c68fb295f813d6570dd9c0db39acd572acf6b9be98f21bdf5dec0ed01fd4510f94f4595a846ccc0c0ba02b201523d00cc4cbd0d33883352599fb79cf17e70f4ffc6b056d0bad827fb2765bbc3bf282d5d8c276d395ff63787f7828c4c661546fc27366b8e3e1166c4311121e299d492061add0034292c3eed89a52f2e687a9c5355087905568832a5c1599e8757dd70aa837f880d284cae433d8af92fb18d39a7c21e8355b2e58b0354050152a06314ab04e5327e9e34cbb7844031dc46ea659c60966fedcebfe94f45accbea9be7962eb61000d665760f0493816e5bf2ddd37bdf1fe82be90597c157a11f6a7cdae3fe15c867ad2f66ed5b4f282d980f8ee3d1f48deea44a7795444b92c2b2baf2bbb33e7b58fa9083335e1344ff6b2695a37ca2cd0dbbdd7f2a3f2ae80843a5105c59e773256f56a3f6b5de59a76b4780c8a9054803aed3542ba3c4c5734d9d3d0f0ccb98119b6d7a704f2150b596d9238e00e732127a378863e67afed4083038d21dd1ac5a9cb96f8465a265fa3b99d2b8d9a548b4f49ac01ba94e9a7ec973168d3962dbaae9451aef5767c472d102c355833cdf6bceaab6765b14b85b362be890cba438a6ada5971cef025198cb47d71637a73efa9e71f163b32124a7fb1b601b4bd1e33689b682c18c6c4e105d2c77f1e7b29caddaabae940de0a080bd04dff0f5851a1733284a108cae6ca8138efe10816115b91aca37603a893249497b50991f329c9b2fd1d8080f02e11a2559416198c47b36f97ba9e2d56612e4cc4321e6896c34c8b1f911b71e0d606eb6099a56e9314627a88e24dfab67adb2246665eb861f49c3933b0e13af11b93310e434a96807f4f792d8c2fb5ddb2f145054305e5d6c732ba1abf58e42b757f0c14d512221637744a1698a203e6864675c68aaaf0586b28c3d27ed19ab50eb8bed3a781653f9b9ac55b16d0606cd138832093020e1aaaa08cbb4d24e7deda0f4c14b72d4b7f21fc6d4bf1c5b5e002434229fd9dd3114b77313cab0eeed6840430075b7c360445af89d01f93882d5fad5782aad1285674a99d61759e1d188d9c0423a3e87b314187fda28a35d6491bfcf588693991576a384475f95fee48abb0e8033e0fcf9b5927a69dfcb274dabdedbb60cff6027b8c551ac6f7abe7656c47ee7aa169dc5a94450b1c780e31ebf1cdadb90fd887cb198e3570f7b802ec38545c1a35a37e0040dee1e0ad0425f31d46bee039fe7e7d350ef88261c210e92da9a3ae607acf11a7a2ef910c624a92acfaba5d1a9ab199488d6ab4550300e981fdfbedd2143b44d9a515f914390ee70c429292a3984e1fc0b4519d031bc276782aa616587310813cd24405418c8c96cb1a934fa2d80b6644cac703443720dc40a6fddf548b38289d9ac0de3d65a2d87d709c626f2e1264bef443da7e150a04758cbd83b80205f54d309449c9da50689e40fec2acafa3bebbab6156135925fb62a7b072facdb30546141f648b359101922b629f04f2cceecfc1c30fc9147839bcc2c083dfee722b4569ffd4b03889f16d78173b79b1c22dfc087790bd81d818b673059c9a18ef9826aa3bd8e7fa609511cdec1124c796a7c9f2dbff602df55405bf9b53f7528ac530a5a6b3208e197218796dd5cdc910925e32c281ad7e432098985a5303882dc5fcc2164d024fba7bc4a343614c8a762fe013d9c6da4f2b297a3e51d5dc3a18cd6e39e2deccb8f87567bd30e91b3e49d8b4f6ec035d25b80116d82e6861c4ef42db8fe05fa6481ea723b56c878a45e4a350606d3fb0d81ab0903b4444e4d56dadff844f5aaadf81db3df8ad5086c61caf96daebe16db1b92a78ea55b5f0f82fc4bb29f7521cc939283fa5d1ae10cddfff7c7850cb727a0b1606c232bd1b3bf7129d5892e2a25242d8e613456a550745e6d5e2cb7573ce51178e729bbb23f5e303b4f9aa02c593cbf314abfc6fd52c6f5ad06b1f3538d5430c45fad12a20f362efce7090d8b1d508b242c1206b4af9cd171a4a6c9e5e07f386b906f30f3fa924a4d7694f3b8fde6935ed4651692c8a53475431330d05043cf3d021be7805ca8ab60ec1f386ca0043486f391e8ad35ab84edc66bb43a0dda1261e0a6b9163ea50f07ba488f966a8b864fbd0364903135e37d046443663a631a0a41ea33f9cc589bd49665a8179bebf27f322cee8dc32f42d62512252756d55f906e30f06c397485981dbe02d6ef94885450b39f78efb5e748e822c3c8a3da579ce3c85263948f67c9a3d568e3015528887a225a2eb2e9fb606e13311f7ad56b865a397fd6c5afd9216692b9450c437ef588d35486bc6b39eaf1650bd5bea8f2d9bc41ef63d8932b66ef0cfab6ac9d6d638a799d51dede232b1927f5aed2a0ec4750344ff59bc2413801a1f1cd6e8f961fed1416dc102d720ac4ffa0dbc67f620a8f3e2ec821b227af1900a1a0866994ec0bc33e23f9b7254a8e9c054b4c05549080b8c15dd5e20e9f38219dcd1ba4fbaa08ce0395a737dae233d253577aac951fd562339d231d95afae79346861d21f543e780efc912f469d0232c35d1a4e73a6545f7aa22f4006267452fee0b6ee2bdb737cc2a440d6ffc4f6ede3d5326fb5e5d74749bbc7e3e39036fe2d284a9e4c92f3ac40f6b1eec46dd077c06664bc6e3c4cce6097759db9f3b563bddf0798894b112f41dc3890a936d024b994609efafd9ae4325409a8a6ec8a7696c879512ced36c722ec41c89ae2fbebb422575e0dc996b65b51114ff7f8a447422ac2f02f5d8ba6d9a079ea3f9f64b8f93eb270088d39a8c6562a4068b1a5651bfa1875b0acca462b819f175f3e511c542f04c73df4891e653d6a28b40c438c17229bc73980a2876d70fab753a345f2178e4c44008c0949b20e27e1855187278b414e1dfb6974fc04fc326782d8c2df4994ac210f117026085ba54c8022bc4aaf73514ec577484cfcb05da42dcc92388d0cbad9401c723c8301594fdeaa0d76745e60b8bf72e94bd77ae1ab60e7f47a64579b54988e8d27961d4f4dc35ac3788f6c52572ba0692b4c33b6b873ef05da8b04b46728f78c018b8b40be28b6e4d30b9938e8e34bb12a5d2219f0e19f1f4e3f3a92d0fe00b5892ac76ba9923ec864cec5778fd677fbe0d51e3b1cb0560be556bcf03e8689870b7daf40531ba6322e0e0572216581509e2f82b1643b5a26a14adaa30b5f6cfeb9ba0424ba8e3e4b5bd2f0bc622ab86e2670341b8d43dd34393ae9c3881e89b4f28cf9333bef555537cf760de253fd901015d22b99fc5a41280351b0b0187aa7a3b426ae6a06abd9648fd00e410d1ae4ae49f212ca971ecec195eb78b5df562019aad2925c3365fe3ff598a1a67348da85c23a492422128c50ddeefaf5c884d51cd90a98775b0f5138d2c639bab8d7068c14374c95ead59d96c599aac60d8fffe3cd7b73bceee831f4bb41e2e032ac645eb5dc5240732fa4d8b83e08fececa830ad61505fd91289d3c7679d8df63e1bd067fdca6200762a688db3381e5bc13366c785aabf50065b9c9b46e457989a7a8d8e7b63fe989ebcaebb26e946d1f006582f2393b6850b5d0bd79c43bcff886341195fbdcbfad8a29ff7e2a5eba3bb16ec97781841385e8147663fde9f2d5aa308e92f6d372db541e5e6671f6166f9d9666763012845b91bf6d121bd7715ce2c0d325534e0da867c83d8384973c35862949ebb41ad6d6eaaae5e431b2a23681dd8d8a9589e60f795805be41ecb2327c829c83ea2bce75b94a17921bfce66f4d70ea191b621b401deeaadd8ee738dc28fd0ee7b983dcb8a7103d0a26e8703d45ccfc941b1fa1898120bf01761b32fcb4d8f7500f1c30ea8096193718e6b861b8066a85c7c066e59592f18411ce616de1095313cf2a798adaeb35e52d9abd86254e82903f131fd4063044ce78c57e7105b93454287468a07ebec684fb5787b8d02ac2a50c3a1cf760040ff80c9539d0be1f5ee901956efe65eef8c4f5aa3532279243d7b2ae347991cd7b33543c707c6ca5be2de359ff191d722c53e8936b97b02bc5f927944dee72430a47b52736de5b9c7ad75a1ddc4be3b39b2e4ff6b1f4a3aca98df7315ea40b23d5dfb7b9d13beb745a76cdd1794b64b1278bcc2440afd29ca87ebf841828c6d14d7952cc156106e13500c78568c729826e7adbcff453b0c747010a742aeb8768b61882dcc7c65d5f67cf3677530777b12657b32c8e7bd73a9b21a9234e4376d163f8220ebf4d46d4ef651e3f2b7646ce75b7cdcc8738647d2d9a5055054f1861a0df9ff3983d86090bfe03ebf208160afb96b159081ae5546f00b678e788454766f49dea26523bdb00e7bb09cb35849c8a89c0ec091b8db49f3b9f319cc194feba2c46eb664868841a9e73a7aeaa335b81e988ddb62825458d646dccd3dad3f9349af845b26c0d431e0f248fe503cf3fbcce83852fcd027d3266a409cb5675e331c58d0a2263636d243b021ab746c87187d3c9ba9f7b6c7a17515a30accd69b327a971d283ee463902d88133efa9d823e36940c428f831ea16985ec52dd09f5705f31218058a8d0aa2fb2bd14b05866d4ce7db25134993dad9fd592c76dc6f8d7f6844655f0b0e73be854d77a8f79d8e638ff5187e0cce20edfac7398f4954e19bf4aef6a8a0356364d71e3d1dac6f557bd7b81030de0a72ad270db5758338d51c71a1e455bcf3dca46e1cf763782e6e7e8feb464bde58a650c8b811ff50d886209c583249fa24e0d85e5608bc77acdae3e7b6f4618b96eb2449a1938bb4da882a0aaf074ebbd159a9b5d8d67d4299aa8e2fe28ffe8296dff82a3941875507cf27b963bd55dddc6156340c02f821356ea8377fb23c5a05a734d6d94684591433b4dc004a370c111aa7faab4949ca3f8617003ced7a441a0c322a7cdf2261fce27ba88087927494acb160a62b11118", @nested={0x8e, 0x5a, 0x0, 0x1, [@generic="a2c8a7556296c4d04a1ac610ecdfe51a7ded267db8d87093b8c95052197b6e26e0965906fc8daf7b64c0a7974ee0321a5803ff0a8cbc36c77c4935a59677c746f5b49189515156dfeb47fd69e3d6241d3ae60bced345f3ccf9e20602ce78f0e5d916b3ada499266a09eaa9392b3380b6f07e388361f4e3dee68df7abe77427b38b36b47d4d95daa83db5"]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x38, 0x0, 0x0, @u32=0x7}, @nested={0x1ed, 0x6c, 0x0, 0x1, [@generic="49d2fff9aff12d60aa4ee1045b88e87e0b7a4a62d3da9b6625c41ae8f05c78f242db364111f55ff498787281b56ba61d2e191a9b0ff2db054a4e1c713657a617186f4c5f002501c3770065b519ab4e3c14dc7a13006bf4117cd78d54fabd87b9fc19eb5208b1e10735b6aaa9f73a1f91f7893bc44488a6502bb5ef49b807aae10900fd1b68e8fca2dd7541a679", @typed={0x8, 0x3c, 0x0, 0x0, @pid=r3}, @generic="64211f5191380bee4ecb9c39eb3696bab1bbafee3f31dd96d4d7bcfac44d3f168212c97224d8602f5e98c65fd2c74a1ddb7373fa87467c4df2a8fde3fbf8fe9b916eaf8293175deb89f27b15539c106e050b3e9e713c14e2a2951cd4e2b3d8a63aaf6cb16b", @typed={0x8, 0x4a, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="020ddd61ad6bbc48b73a77fd5ba71bacd403016acf5d843330c2f31d635435d3b9747ed488fdf13173104174db2f78456590c599c197c2ee0c32c9455b4af853d52d7b41d1022780f67e41e2a566c38d6fde97a5a6ac4b8497cc5a4eee2aa7945955935686a2a6e368ead244ab6b1aa42b80bda2d9849414161cd3ea563c759764eeda6fcefd233a9a5e24a74d3b73f88b382d0c97210fa81c6842f7f4093e217f792452930f8c997a31a348a4412a4cf960d85d98495b38f17e4a13edaece6cac1489485d16867ebd1b7220d1cab87b2aa431", @typed={0xc, 0x41, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @generic="f3669cffd903b65b9d56ac1834a0265765249cca118ed2a9d291f99120b955e773af0fafbe7ef7f992c064fa4e9f90dca70a15fdf219c89bfca546a4cc521502cfbbee959068d6306118e491f4fc75698de049679b1db46c68d5f6adbe2a089e54f22c27fc7df55ff18d7cbd794c8774173565ed76c74b1fc8b7b5715e6fcbe6f7e98ce98a8b321c3d9c5ec0c2fa7d94ade2560f717818b1c4a2cff2db5b51de702f42e3a160a583e9859c01aab41d3cf65a03429c579a138db78b6f40171780b2e19247c080804b319c74ea4b41efa00e6e0fda5e49004a6c2f28cc8d4c6ca012580395266759705f8e68bc64c28a4cf8", @typed={0x8, 0x6a, 0x0, 0x0, @pid=r4}]}, 0x13ac}, 0x1, 0x0, 0x0, 0x40880}, 0x48800)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r5, 0xca2ea000)
write$cgroup_pid(r5, &(0x7f00000000c0), 0x12)
sendfile(r5, r5, &(0x7f0000000000)=0x8, 0x800)

07:15:42 executing program 4:
prctl$PR_SET_FP_MODE(0x2d, 0x3)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000000c0), 0x12)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) (fail_nth: 17)

07:15:43 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x634082, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000100)=<r1=>0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r2, r3, 0x1000)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x7, r1}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, r3}, {0x8, 0x4fa4366c6f74d5d5, 0xee01}, {0x8, 0x2, 0xee01}, {0x8, 0x0, 0xee01}], {0x10, 0x6}, {0x20, 0x5}}, 0x54, 0x3)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)

07:15:43 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 25)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2174.309044] FAULT_INJECTION: forcing a failure.
[ 2174.309044] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.310586] CPU: 0 PID: 62595 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2174.311407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.312375] Call Trace:
[ 2174.312690]  dump_stack+0x107/0x167
[ 2174.313117]  should_fail.cold+0x5/0xa
[ 2174.313569]  ? create_object.isra.0+0x3a/0xa20
[ 2174.314107]  should_failslab+0x5/0x20
[ 2174.314553]  kmem_cache_alloc+0x5b/0x310
[ 2174.315041]  create_object.isra.0+0x3a/0xa20
[ 2174.315555]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2174.316153]  kmem_cache_alloc+0x159/0x310
[ 2174.316645]  copy_process+0x2514/0x78b0
[ 2174.317112]  ? __lock_acquire+0xbb1/0x5b00
[ 2174.317621]  ? __cleanup_sighand+0xb0/0xb0
[ 2174.318122]  ? lock_acquire+0x197/0x470
[ 2174.318592]  ? find_held_lock+0x2c/0x110
[ 2174.319073]  kernel_clone+0xe7/0x980
[ 2174.319511]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.319988]  ? find_held_lock+0x2c/0x110
[ 2174.320462]  ? create_io_thread+0xf0/0xf0
[ 2174.320945]  ? ksys_write+0x12d/0x260
[ 2174.321392]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2174.321956]  __do_sys_fork+0x8a/0xc0
[ 2174.322391]  ? kernel_thread+0xf0/0xf0
[ 2174.322858]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2174.323468]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.324061]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.324564]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.325157]  do_syscall_64+0x33/0x40
[ 2174.325589]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.326183] RIP: 0033:0x7f46dde30b19
[ 2174.326613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.328749] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2174.329680] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2174.330550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2174.331434] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.332305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.333159] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:43 executing program 0:
fchdir(0xffffffffffffffff)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080))
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x242002, 0x4a)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

07:15:43 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 26)
socket$inet6_udplite(0xa, 0x2, 0x88)

[ 2174.417864] FAULT_INJECTION: forcing a failure.
[ 2174.417864] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2174.419546] CPU: 0 PID: 62707 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2174.420358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.421345] Call Trace:
[ 2174.421658]  dump_stack+0x107/0x167
[ 2174.422079]  should_fail.cold+0x5/0xa
[ 2174.422537]  __alloc_pages_nodemask+0x182/0x600
[ 2174.423096]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2174.423714]  ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200
[ 2174.424432]  alloc_pages_current+0x187/0x280
[ 2174.424936]  __get_free_pages+0xc/0xa0
[ 2174.425381]  pgd_alloc+0x84/0x4e0
[ 2174.425784]  ? pgd_page_get_mm+0x40/0x40
[ 2174.426254]  ? lockdep_init_map_type+0x2c7/0x780
[ 2174.426809]  ? lockdep_init_map_type+0x2c7/0x780
[ 2174.427357]  mm_init+0x670/0xab0
[ 2174.427754]  copy_process+0x257b/0x78b0
[ 2174.428220]  ? __lock_acquire+0xbb1/0x5b00
[ 2174.428719]  ? __cleanup_sighand+0xb0/0xb0
[ 2174.429201]  ? lock_acquire+0x197/0x470
[ 2174.429667]  ? find_held_lock+0x2c/0x110
[ 2174.430135]  kernel_clone+0xe7/0x980
[ 2174.430573]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.431067]  ? find_held_lock+0x2c/0x110
[ 2174.431534]  ? create_io_thread+0xf0/0xf0
[ 2174.432019]  ? ksys_write+0x12d/0x260
[ 2174.432467]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2174.433027]  __do_sys_fork+0x8a/0xc0
[ 2174.433463]  ? kernel_thread+0xf0/0xf0
[ 2174.433912]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2174.434511]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.435107]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.435612]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.436195]  do_syscall_64+0x33/0x40
[ 2174.436628]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.437217] RIP: 0033:0x7f46dde30b19
[ 2174.437652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.439809] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2174.440699] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2174.441522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2174.442346] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.443177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.444008] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:43 executing program 3:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000001700)='net/route\x00')
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork() (fail_nth: 27)
socket$inet6_udplite(0xa, 0x2, 0x88)

07:15:43 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
openat(r0, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x800, 0x6a)

[ 2174.539076] FAULT_INJECTION: forcing a failure.
[ 2174.539076] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.540420] CPU: 0 PID: 62513 Comm: syz-executor.4 Not tainted 5.10.239 #1
[ 2174.541214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.542168] Call Trace:
[ 2174.542478]  dump_stack+0x107/0x167
[ 2174.542911]  should_fail.cold+0x5/0xa
[ 2174.543353]  ? create_object.isra.0+0x3a/0xa20
[ 2174.543888]  should_failslab+0x5/0x20
[ 2174.544321]  kmem_cache_alloc+0x5b/0x310
[ 2174.544789]  create_object.isra.0+0x3a/0xa20
[ 2174.545289]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2174.545873]  __kmalloc_node+0x1ae/0x420
[ 2174.546334]  kvmalloc_node+0x119/0x170
[ 2174.546790]  bucket_table_alloc.isra.0+0x88/0x490
[ 2174.547338]  rhashtable_init+0x341/0x760
[ 2174.547809]  rhltable_init+0x1c/0x60
[ 2174.548237]  sta_info_init+0x1f/0x110
[ 2174.548679]  ieee80211_alloc_hw_nm+0x6a0/0x2320
[ 2174.549213]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.549713]  mac80211_hwsim_new_radio+0x1cd/0x4290
[ 2174.550275]  ? ____sys_sendmsg+0x70d/0x870
[ 2174.550765]  ? ___sys_sendmsg+0xf3/0x170
[ 2174.551225]  ? __sys_sendmsg+0xe5/0x1b0
[ 2174.551680]  ? do_syscall_64+0x33/0x40
[ 2174.552122]  ? entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.552736]  ? lock_acquire+0x197/0x470
[ 2174.553187]  ? create_object.isra.0+0x3ad/0xa20
[ 2174.553721]  ? hwsim_send_nullfunc_ps+0x80/0x80
[ 2174.554259]  hwsim_new_radio_nl+0x991/0x1080
[ 2174.554770]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2174.555369]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280
[ 2174.556124]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280
[ 2174.556875]  genl_family_rcv_msg_doit+0x22d/0x330
[ 2174.557432]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280
[ 2174.558191]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2174.558824]  ? cap_capable+0x1cd/0x230
[ 2174.559276]  ? ns_capable+0xe2/0x110
[ 2174.559703]  genl_rcv_msg+0x36a/0x5a0
[ 2174.560142]  ? genl_get_cmd+0x480/0x480
[ 2174.560599]  ? mac80211_hwsim_new_radio+0x4290/0x4290
[ 2174.561194]  ? lock_release+0x680/0x680
[ 2174.561654]  ? netlink_deliver_tap+0xf4/0xcc0
[ 2174.562170]  netlink_rcv_skb+0x14b/0x430
[ 2174.562640]  ? genl_get_cmd+0x480/0x480
[ 2174.563105]  ? netlink_ack+0xab0/0xab0
[ 2174.563558]  ? netlink_deliver_tap+0x1c4/0xcc0
[ 2174.564084]  ? is_vmalloc_addr+0x7b/0xb0
[ 2174.564554]  genl_rcv+0x24/0x40
[ 2174.564935]  netlink_unicast+0x54e/0x800
[ 2174.565402]  ? netlink_attachskb+0x870/0x870
[ 2174.565913]  netlink_sendmsg+0x90f/0xe00
[ 2174.566386]  ? netlink_unicast+0x800/0x800
[ 2174.566881]  ? netlink_unicast+0x800/0x800
[ 2174.567369]  __sock_sendmsg+0x154/0x190
[ 2174.567824]  ____sys_sendmsg+0x70d/0x870
[ 2174.568296]  ? sock_write_iter+0x3d0/0x3d0
[ 2174.568782]  ? do_recvmmsg+0x6d0/0x6d0
[ 2174.569241]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.569721]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2174.570323]  ___sys_sendmsg+0xf3/0x170
[ 2174.570788]  ? sendmsg_copy_msghdr+0x160/0x160
[ 2174.571313]  ? __fget_files+0x2cf/0x520
[ 2174.571769]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.572259]  ? find_held_lock+0x2c/0x110
[ 2174.572742]  ? __fget_files+0x2f8/0x520
[ 2174.573200]  ? __fget_light+0xea/0x290
[ 2174.573668]  __sys_sendmsg+0xe5/0x1b0
[ 2174.573751] FAULT_INJECTION: forcing a failure.
[ 2174.573751] name failslab, interval 1, probability 0, space 0, times 0
[ 2174.574101]  ? __sys_sendmsg_sock+0x40/0x40
[ 2174.574122]  ? rcu_read_lock_any_held+0x75/0xa0
[ 2174.577516]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2174.578117]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.578716]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.579218]  do_syscall_64+0x33/0x40
[ 2174.579651]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.580240] RIP: 0033:0x7f5927a91b19
[ 2174.580675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.582830] RSP: 002b:00007f5925007188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2174.583713] RAX: ffffffffffffffda RBX: 00007f5927ba4f60 RCX: 00007f5927a91b19
[ 2174.584538] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000008
[ 2174.585362] RBP: 00007f59250071d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.586185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.587020] R13: 00007ffcc16cdcff R14: 00007f5925007300 R15: 0000000000022000
[ 2174.587884] CPU: 1 PID: 62909 Comm: syz-executor.3 Not tainted 5.10.239 #1
[ 2174.589765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2174.590004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2174.592001] Call Trace:
[ 2174.592045]  dump_stack+0x107/0x167
[ 2174.592835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2174.593406]  should_fail.cold+0x5/0xa
[ 2174.593429]  ? create_object.isra.0+0x3a/0xa20
[ 2174.597084]  should_failslab+0x5/0x20
[ 2174.597891]  kmem_cache_alloc+0x5b/0x310
[ 2174.598779]  create_object.isra.0+0x3a/0xa20
[ 2174.599714]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2174.600796]  kmem_cache_alloc+0x159/0x310
[ 2174.601689]  copy_process+0x2514/0x78b0
[ 2174.602068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2174.602675]  ? __lock_acquire+0xbb1/0x5b00
[ 2174.602715]  ? __cleanup_sighand+0xb0/0xb0
[ 2174.605230]  ? lock_acquire+0x197/0x470
[ 2174.606069]  ? find_held_lock+0x2c/0x110
[ 2174.606935]  kernel_clone+0xe7/0x980
[ 2174.607716]  ? lock_downgrade+0x6d0/0x6d0
[ 2174.608586]  ? find_held_lock+0x2c/0x110
[ 2174.609444]  ? create_io_thread+0xf0/0xf0
[ 2174.610331]  ? ksys_write+0x12d/0x260
[ 2174.611138]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 2174.612163]  __do_sys_fork+0x8a/0xc0
[ 2174.612956]  ? kernel_thread+0xf0/0xf0
[ 2174.613776]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2174.614877]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.615942]  ? trace_hardirqs_on+0x5b/0x180
[ 2174.616839]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2174.617921]  do_syscall_64+0x33/0x40
[ 2174.618712]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2174.619797] RIP: 0033:0x7f46dde30b19
[ 2174.620584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2174.624498] RSP: 002b:00007f46db3a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000039
[ 2174.626128] RAX: ffffffffffffffda RBX: 00007f46ddf43f60 RCX: 00007f46dde30b19
[ 2174.627666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2174.629185] RBP: 00007f46db3a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2174.630697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2174.632217] R13: 00007ffda1ec830f R14: 00007f46db3a6300 R15: 0000000000022000
07:15:43 executing program 6:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r2, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)

07:15:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198", @ANYRES32, @ANYRES64=r2])
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x460, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

07:15:43 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './cgroup/cgroup.procs\x00'})
write$cgroup_pid(r0, &(0x7f00000000c0), 0x12)
pwrite64(r0, &(0x7f0000000080), 0x0, 0x5)

07:15:43 executing program 7:
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
lstat(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = syz_open_dev$vcsn(0x0, 0x1, 0x300)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', r1, r2, 0x1000)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
open(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', 0x141000, 0x80)
fsmount(r0, 0x0, 0x74)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000300))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0)

07:15:43 executing program 5:
r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x1, 0x10010, r0, 0x10000000)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000880), &(0x7f0000000000)='./file0\x00', 0x609, 0x1000, 0x1}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="000500000000000004010601003f27bfbaee49142b9384acc194db5e0212fa86603572b254d71d2f7773e70fb2d4"], 0x38)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"})
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5983b5a86e6a174b7b2b317b4044a94da343d08000000000000000665824272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8c17534f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r5, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd8020812}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x94, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x7d}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xffff}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x1ff, 0x5, 0x6, 0x6, 0x0, 0x1, 0x9, 0x80, 0x100]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x15, 0x13, [{0x9, 0x1}, {0x60, 0x1}, {0x1}, {0x12}, {0x30}, {0x18}, {0xc, 0x1}, {0x36, 0x1}, {0x2}, {0x9, 0x1}, {0xc}, {0x1}, {0x6c, 0x1}, {0x2, 0x1}, {0xc, 0x1}, {0x9}, {0x30}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendto(r3, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000)

07:15:43 executing program 2:
r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x0, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040))
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = memfd_create(&(0x7f00000003c0)='\x00\'\'x\xe0\x1c\x02\x00d\x88\xc4P\xb0\x01\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\xf9\n\x17`\xf1U\'\\\x14\t\xc2\xaa|\x81\x91=;h\xfeGm\xaf\x88\xf7\x01\xce\xdc.fjW\x8d\xf9\xbf\xd3\xf1\xa1\xa2\xb0\xcf\xbb|\xdfp\xd7sI\x8dyz\x1c\xb6\xe5\xb9Ta\xcf\xab\xc32\xd9\xaea\x80\xc6\x92', 0x6)
read(r1, 0x0, 0x2e)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001a000100"/46, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414aa000000000000000000000000000000003c00033d0977169a81a43df47a0000fc0100000000000000000000000000000000000000000000000000b80000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000002000000000cb80000000000000000000000000000000000000000000000000a00"/178], 0xfc}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001500)='net/ip6_mr_cache\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000200)=ANY=[@ANYBLOB="8f4275dc21060010000000dae9219a47c5e33e9516174198e8", @ANYRES32, @ANYRES64=r2])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fork()
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x0, 0x0, [@dev, @dev]}, 0x28)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000014c0)=""/61, 0x3d}, {&(0x7f0000001540)=""/52, 0x34}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/59, 0x3b}], 0x5)

[ 2174.825976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2174.828464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 2174.988915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2174.990574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2174.992254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready

VM DIAGNOSIS:
07:20:46  Registers:
info registers vcpu 0
RAX=ffffffff83e942d0 RBX=0000000000000000 RCX=ffffffff83e7bf7c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e949e8 RBP=0000000000000000 RSP=ffffffff84e07e38
R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001
R12=0000000000000000 R13=ffffffff85678988 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e942de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9180a5d000 CR3=000000000fb5c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=7465677261742e79636e656772656d65
XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=00000000000000210065636976726573
XMM04=2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e XMM05=5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a
XMM06=20202020202020202020202020202020 XMM07=00000000000000000000000000000000
XMM08=6563696c732e6d65747379732f3a3a30 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=ffffffff83e942d0 RBX=0000000000000001 RCX=ffffffff83e7bf7c RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff83e949e8 RBP=0000000000000001 RSP=ffff888008987e70
R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001
R12=0000000000000001 R13=ffffffff85678988 R14=0000000000000000 R15=dffffc0000000000
RIP=ffffffff83e942de RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc1054d738 CR3=000000000cc24000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000004145764000000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000