_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:41:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:41:36 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) syz_io_uring_setup(0x10bf, &(0x7f0000000000)={0x0, 0x8562, 0x4, 0x0, 0x255, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:41:36 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x2, 0x2) fcntl$setown(r1, 0x8, r2) clone3(&(0x7f0000000280)={0x200000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x1f}, &(0x7f0000000140)=""/53, 0x35, &(0x7f0000000180)=""/145, &(0x7f0000000240)=[r0, r0, r2, r0], 0x4}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r6, 0x0, r5, 0x0, 0x26c, 0x0) r7 = gettid() process_vm_readv(r7, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=0x0) r9 = openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) kcmp(r7, r8, 0x4, r4, r9) 05:41:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:41:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:41:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:41:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:41:36 executing program 5: clone3(&(0x7f0000000000)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x10000, 0x99, 0x17}, 0x18) copy_file_range(r0, &(0x7f0000000100)=0x5, 0xffffffffffffffff, &(0x7f0000000140)=0x2, 0x2, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00'}) 05:41:36 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x200) 05:41:36 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:41:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:41:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:41:50 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r1, 0x0, 0x1b) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:41:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:41:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:41:50 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xfe, 0x1f, 0x20, 0x6, 0x401, 0x2, 0x3, 0x1000, 0xbc, 0x40, 0x4c, 0x26, 0x1f, 0x38, 0x1, 0x9, 0x8}, [{0x6474e554, 0xd1a, 0x1f, 0x7, 0x1ff, 0x2, 0x4, 0x3}, {0x1, 0x80000001, 0x1, 0x100, 0x1, 0x9, 0x401, 0xffffffffffffff81}], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9b0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x3e, 0x300, 0x70bd25, 0x25dfdbfd, {0x14}, [@nested={0x4c, 0xc, 0x0, 0x1, [@generic="75acc7f56038f3ad7fa6be2fef31ea81e14bc99359848315944f0fc2e04ed58f7fad8b8a5922b1ca5b49019f9b90f624ab5cd5330e3c5ea1", @typed={0x8, 0x10, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r1}]}]}, 0x60}}, 0x5) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r5, 0x0, r6) 05:41:50 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:41:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:41:50 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) setns(r3, 0x2000000) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x1d4, 0x1d, 0x800, 0x70bd28, 0x25dfdbfd, {0x1e}, [@generic="f6bd60a7e4935c912fcd2623b69b83f8ef7825ab67cb536022bd9e9e2e", @generic="0449f87ef0634139c683ebd8a8dbef79dbf34ace46829e27a6ac431bceb86e47f1b9fe12f0d004fbbb0d4e94b284e065c01f3a52c2117c11be9b7a045a04182c91a53b1e174a497a1a502640234413745e2dd1672d95879eb94a621de8bd40618429551e91fafa53bd162b6036187d2e5f57c0963e956d13d83d7fba825b1b1d0aa709861332bef79682a2521e", @generic="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", @typed={0x8, 0x14, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x87, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="0d2f036c0f64f2dedd"]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048040) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x20000000}, 0x0) 05:41:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:41:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:41:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:41:50 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) clone3(&(0x7f0000001200)={0x18c209b80, 0x0, 0x0, 0x0, {}, 0x0, 0xfdc9, 0x0, 0x0, 0x0, {r0}}, 0x38) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x26c, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xfffffffffffffffc, 0x200000) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x6d3, 0x101100) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x104800, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368650600000073652c6114fe6573733d631d24656e742c61707072616973655f747970653d696c617369672c61707072616973655b74793db048b4dfde8ec5672c666f776e65723c", @ANYRESDEC, @ANYBLOB=',\x00']) 05:41:50 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$poke(0x4, r2, &(0x7f00000000c0), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:41:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:41:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:41:50 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) r0 = eventfd(0xf4) write(r0, &(0x7f0000000000)="1c8301c1f761c32008e8bca6bc21a96a3632a2a1ee942dc4dc82607ba7a5849e61512153043cac6dba3571b1566303ca06410e1ceb23108d5a92a3", 0x3b) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x81) splice(r4, 0x0, r3, 0x0, 0x26c, 0x0) 05:41:50 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:07 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x677a75840d66933a}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x1) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:42:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:42:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:42:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:07 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:42:07 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/user\x00') stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, r2, 0xee00}, 0xc) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:42:07 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@cache_mmap}, {@version_9p2000}, {@cache_none}, {@version_9p2000}], [{@fowner_lt={'fowner<', r1}}, {@smackfsdef}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '!$\\/$:'}}, {@context={'context', 0x3d, 'root'}}, {@fsmagic}]}}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) 05:42:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:07 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/69, 0x55}, {&(0x7f0000000080)=""/78, 0x4e}, {&(0x7f0000000280)=""/179, 0xb3}, {&(0x7f00000001c0)=""/90, 0x5a}], 0x4) 05:42:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:42:07 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) sendto$inet6(r3, &(0x7f0000000040)="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", 0x1000, 0x4000005, &(0x7f0000001040)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xed}, 0x1c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x26c, 0x0) 05:42:20 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:20 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:42:20 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x26c, 0x0) 05:42:20 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) dup3(r3, r2, 0x0) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xbe440, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@noextend}, {}, {@cachetag={'cachetag', 0x3d, '/dev/sr0\x00'}}, {@afid={'afid', 0x3d, 0x2}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@uid_lt={'uid<', r5}}, {@seclabel}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '.pending_reads\x00'}}]}}) 05:42:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:42:21 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, &(0x7f0000000000)=0x6, 0x3, 0x1) ptrace(0x11, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:42:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:42:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:21 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r2, 0x0, r3) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x26c, 0x0) 05:42:21 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:21 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x800}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000001440)) r4 = fork() ptrace$pokeuser(0x6, r4, 0x2, 0x2) fcntl$setown(r3, 0x8, r4) clone3(&(0x7f00000013c0)={0x118070000, &(0x7f0000001080)=0xffffffffffffffff, &(0x7f00000010c0)=0x0, &(0x7f0000001100), {0x3b}, &(0x7f0000001280)=""/221, 0xdd, &(0x7f0000001140)=""/136, &(0x7f0000001380)=[r4, r0, r0], 0x3, {r1}}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x10, r4) fcntl$setpipe(r5, 0x407, 0x7f) splice(r1, 0x0, r7, 0x0, 0x26c, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r9, 0x0) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001600)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x8000, 0x4e20, 0x6, 0x2, 0x80, 0x20, 0x8, 0x0, r9}, {0x3, 0x0, 0x1, 0x1, 0x80000000, 0x7, 0xcad2, 0x10000}, {0x4, 0x3f, 0x1, 0x9}, 0x80000001, 0x6e6bb3, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x238e8256e2e3ec61, 0x1, 0x1, 0x8, 0x0, 0x7fff}}, 0xe8) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001040), 0x602001, 0x0) fcntl$setown(r8, 0x8, r6) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f0000000040)={{r10}, "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"}) 05:42:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:21 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) r2 = gettid() process_vm_readv(r2, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/user\x00') mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) 05:42:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:34 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, r3) r4 = fcntl$getown(r2, 0x9) sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0) 05:42:34 executing program 5: clone3(&(0x7f0000000000)={0x88338d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:42:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:34 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:42:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:34 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r2, &(0x7f0000000000)=0x4, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0xff, 0x2) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:42:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:42:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:34 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r2, 0x0, r1, 0x0, 0x26b, 0x0) 05:42:34 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000001c0)) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000180)={0x401, 0x3f, 0x101, 0x2f}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2c0080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, '\xc2'}}, {@permit_directio}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '{'}}]}}) 05:42:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:34 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:34 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:42:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:47 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:42:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:42:47 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_capability(r1, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x80000001, 0xd983}, {0x7ff, 0x8}]}, 0x14, 0x2) write$binfmt_elf64(r1, 0x0, 0x26c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x26c, 0x0) 05:42:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:47 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() rt_sigqueueinfo(r0, 0x23, &(0x7f00000000c0)={0xf, 0x100, 0x3}) r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) fcntl$setown(r3, 0x8, r0) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:42:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c111}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x800) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x26c, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="10005a80"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x4}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xffa8}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x80}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 05:42:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:42:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:42:47 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) syz_io_uring_submit(r3, r4, &(0x7f0000000900)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x0, 0xcc, 0x2}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x4004, @fd_index, 0x7b7, 0x0, 0x0, 0x12, 0x0, {0x1, r5}}, 0xfe3) 05:42:47 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:42:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:42:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:42:47 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:00 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:43:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:00 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r4 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x2, &(0x7f0000000140)=[{&(0x7f0000000200)="8670241cbadbb9547f022aabc7f227ba1e935f5c8827f2e9316f73cc04a732dfd8165ca9dc241b9753dcb09ebe672af8f051b6999c0b6e8c63eeea67f1e4861e190c27237908b0375665f24343983316bc353feb2135d124633c882966551b6574bcfdc369a897473e7943423e4e06aa02a545b795dab89a5e2dd21d4c85ff7a0753445ae25251b568cad39c9e8c3236eb661620967f4d4662617aae8262691ab9697e3a1dc94b44c2937e5e2079d071de0a369880c2ec0dab95e429a6a848129f", 0xc1, 0xeb}, {&(0x7f00000000c0)="e34ed0bb6a2df034918d1b48d9c1519a0e32657cc7b647428f5f8beb2a6249ced9873faf6af272c6d9f3b6c1f4fb5153091ff76591c28789bb208e4e3dfed250e34c3164c052121044dd1fa1ec2e0773856aa959e3880518b550bb6f808bcd6172af384729f28a6db474", 0x6a}], 0x8421, &(0x7f0000000300)={[{@map_acorn}, {@check_relaxed}], [{@appraise_type}, {@pcr={'pcr', 0x3d, 0x1}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '{'}}]}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ppoll(&(0x7f0000000380)=[{r2, 0xa}, {r3, 0xb400}, {0xffffffffffffffff, 0x2c0}, {r2, 0x200}, {r4, 0x1000}, {r5, 0x2004}, {r2, 0x51a}, {r2, 0x10b4}], 0x8, &(0x7f00000003c0), &(0x7f0000000400)={[0xe4]}, 0x8) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) [ 1216.313595] tmpfs: Bad value for 'mpol' 05:43:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:43:00 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fallocate(0xffffffffffffffff, 0x72, 0x7, 0xfffffffffffff8a7) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10000, 0x2, &(0x7f0000000180)=[{&(0x7f0000000080)="7a71165150d95fc4fbf6728de2714c1a83d325eb6201c20ec7389a18c0321121f6bf9d5276300a1992f50d338522750038042d3ef86daffd0f4324db569aeb2118cc2b9d250874f987c9bdda41eee108fe5d2217", 0x54, 0x8}, {&(0x7f0000000100)="04aea92b8408223c8272e1dc5ac8f99da7c22026fc9e5e1dbe2117bd49ea05e431de1d1ef8260b9c381d878b13dc10469e285ed0fc654eb9d0b610cea3948af34264ad4dc701b36842f6a6e23e52d856b19eced7ccc4e746e1dcd1706b549c901921a41192579481ad0334f5e38644d5e1", 0x71, 0x81}], 0x14, &(0x7f00000001c0)={[{@huge_never}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x37, 0x36, 0x36, 0x30, 0x35, 0x3a, 0x33, 0x34]}}}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x1f98}}]}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000240)={0x1}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x400}}, './file0\x00'}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:43:00 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:43:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:43:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) 05:43:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xf6000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:00 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:00 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0x1010, r1, 0x6cfdb000) 05:43:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:14 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000000)=@caif, 0x80, 0x0}, 0x2}, {{&(0x7f0000000080)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/58, 0x3a}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/78, 0x4e}], 0x5, &(0x7f0000000400)=""/189, 0xbd}, 0xc8}, {{&(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/39, 0x27}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/23, 0x17}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/122, 0x7a}, {&(0x7f00000008c0)=""/126, 0x7e}, {&(0x7f0000000940)=""/49, 0x31}, {&(0x7f0000000980)=""/194, 0xc2}], 0xa, &(0x7f0000000b40)=""/75, 0x4b}, 0x63}, {{&(0x7f0000000bc0)=@qipcrtr, 0x80, &(0x7f0000001180)=[{&(0x7f0000000c40)=""/111, 0x6f}, {&(0x7f0000000cc0)=""/218, 0xda}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/131, 0x83}, {&(0x7f0000000e80)=""/184, 0xb8}, {&(0x7f0000000f40)=""/240, 0xf0}, {&(0x7f0000001040)}, {&(0x7f0000001080)=""/194, 0xc2}], 0x8, &(0x7f0000001280)=""/222, 0xde}, 0x4}], 0x4, 0x18102, 0x0) write$binfmt_elf64(r0, &(0x7f0000002740)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3, 0x1, 0x2df, 0x40, 0x37a, 0x5, 0x5a8, 0x38, 0x1, 0x401, 0x2f4, 0x4}, [{0x60000000, 0x5f94, 0x3, 0xfff, 0x8, 0x4, 0xed71, 0xf29}, {0x1, 0x9, 0x2, 0xd97, 0x8, 0x1ff, 0x0, 0xfff}], "5df913f655a099755b1d9113b5aef2488cf32b21b0f83b83dabf068ad7498d95db4806155745db1f540434c50b849650fbbe7521dc38b255a3b97ff26c6d02be3181d21535add6289fe556a751b390ff232d859d0b47f07752e4f715a3be4ed84593cd8cf2a274b29164851a53fdee7fe7532297be531f2377de618ff185a8afd8fe6a7173e82896fe65efde55efc126f75cc6cdb0d1ebbc735dbb281f6a9eb661cbbc1d131e87f349040d5a2482fba822f4222f318ad9d3dcbbc1c59c4081332362483ec3", ['\x00', '\x00', '\x00']}, 0x475) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r2, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:43:14 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:43:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:14 executing program 3: clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000100)={0x5, 0x0, 0x2, 0xe6e, 0x4, 0xfffa}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfa, @remote, 0x2}, {0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x8, [0x4, 0x5, 0x4cd6f2e9, 0x2, 0xa4, 0x40, 0x7fff, 0x8]}, 0x5c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x501100, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x26c, 0x0) 05:43:14 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ptrace$cont(0x1f, r3, 0x4, 0x7) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) r4 = fcntl$getown(r2, 0x9) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000000}, 0x0) 05:43:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:14 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) r3 = gettid() process_vm_readv(r3, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x3a98, 0x103000) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/fscreate\x00', 0x2, 0x0) kcmp(r3, r4, 0x1, r5, r6) 05:43:14 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:14 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, './file0\x00'}) ioctl$CDROM_LAST_WRITTEN(r0, 0x5395, &(0x7f0000000040)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fchown(r5, 0xee01, 0xffffffffffffffff) fcntl$dupfd(r3, 0x0, r1) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r6, 0x0, 0x26c, 0x0) 05:43:14 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:14 executing program 5: clone3(&(0x7f0000000000)={0x48001080, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0xffffffffffff117a, 0x8, 0x1000200}) creat(&(0x7f00000000c0)='./file0\x00', 0x2e) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:43:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:30 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x26c, 0x0) 05:43:30 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ptrace(0x4207, r1) ptrace(0x10, r0) r2 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace(0x8, r3) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:43:30 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:43:30 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000002880)=""/276, 0x114}, {&(0x7f0000000140)=""/164, 0xffffffffffffff2c}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000002500)=""/209, 0xd1}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x6) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:43:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:30 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xdaf, 0x7, 0x3, 0x7b6d, 0x7d, 0x2}, {0x101, 0x8, 0xfffffffffffffffe, 0x3, 0xbc7, 0x8}], ['\x00', '\x00', '\x00', '\x00']}) 05:43:30 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:30 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',unng_reads\x00,noextend,access=anZ,loos\x00,permit_directio,smackfsdef=,\x00'/78]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000200)={0x52, 0x8, 0x8, {0x3, 0x7fff}, {0x81, 0x7fff}, @cond=[{0x7, 0x200, 0x401, 0x2, 0x1, 0xe2}, {0x1, 0x5, 0x9, 0x4b7, 0x8001, 0x5}]}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r7, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clone3(&(0x7f0000000500)={0x906100, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x3c}, &(0x7f0000000300)=""/177, 0xb1, &(0x7f00000003c0)=""/164, &(0x7f00000004c0)=[0x0, r0], 0x2, {r7}}, 0x58) splice(r3, 0x0, r5, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r8, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000000)={0x5, 0x4, 0x4e}) openat$incfs(0xffffffffffffffff, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) 05:43:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:43:30 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:30 executing program 4: pkey_mprotect(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:43:44 executing program 3: ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r0, 0x0, 0x80a4963f2a3bbf0d) pipe(&(0x7f00000014c0)) 05:43:44 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:43:44 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$getown(r2, 0x9) 05:43:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:44 executing program 5: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:43:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:44 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:44 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x40000000, 0x100000000, 0x200}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) signalfd(r2, &(0x7f0000000040), 0x8) 05:43:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x9, 0x7, 0x3ff, 0xffff, 0x0, 0x7ff}, {0x9, 0x7, 0x3f, 0x101, 0x9, 0x2}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:43:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:43:58 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:43:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:58 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fork() ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x2, 0x2) fcntl$setown(r3, 0x8, r4) fcntl$lock(r2, 0x22, &(0x7f0000000180)={0x2, 0x3, 0xe1b3, 0xc0000, r4}) close_range(r0, r0, 0x0) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0x26c, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@dfltgid}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_client}], [{@audit}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}}) 05:43:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x3ff, 0x4, 0x20, 0x8, 0x20}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x5, [0x9, 0x4, 0x7ff, 0x9, 0xfffffffffffeffff, 0xffffffffffffffc0]}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f00000000c0)=0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x7, 0x9, 0x80000001, 0x1}, 0x10) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:43:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:43:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:43:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:43:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:12 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x800}, 0x0, 0x0, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) r3 = fork() ptrace(0x10, r3) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ptrace$setsig(0x4203, 0x0, 0x3, &(0x7f0000000100)={0x3a, 0xfffffff8, 0x8}) ptrace$pokeuser(0x6, r3, 0x2, 0x2) fcntl$setown(r2, 0x8, r3) creat(&(0x7f00000000c0)='./file0\x00', 0xd0) r4 = getpgid(0xffffffffffffffff) ptrace(0x4207, r4) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000000)={&(0x7f0000000200)=""/248, 0xf8}) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400000000000000, 0x2000005, 0xfffffffc}, 0x0) 05:44:12 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:44:12 executing program 3: pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:44:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:12 executing program 5: pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clone3(&(0x7f0000001200)={0x88a08980, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r1, 0x0, r3, 0x0, 0x26d, 0x0) 05:44:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:12 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x5f16, &(0x7f0000000040)={0x0, 0x53d4, 0x20, 0x0, 0xdc}, &(0x7f0000fec000/0x11000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000140)={0x1, 0x10001, 0xfaa}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) r3 = fsmount(r1, 0x0, 0x89) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r3, 0x2672, 0x9e4, 0xfff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) 05:44:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:26 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28004010}, 0x40000) 05:44:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x28, 0x12, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x80}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:44:26 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:26 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() ioprio_set$pid(0x1, r1, 0x6000) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/uts\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:44:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:26 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:26 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fstatfs(r3, &(0x7f0000000000)=""/3) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:44:26 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:26 executing program 3: ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000280)={0xb, 0x1c, 0x2, 0xd, 0xb, 0x10000, 0x4, 0xee, 0x1}) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:44:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, 0x0, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:26 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:44:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:26 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:39 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:44:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:39 executing program 5: sysfs$2(0x2, 0x4, &(0x7f0000000780)=""/81) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fallocate(r2, 0x69, 0x8000, 0xff) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) recvmsg$unix(r3, &(0x7f0000000740)={&(0x7f0000000080), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000100)=""/221, 0xdd}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000300)=""/116, 0x74}, {&(0x7f0000000380)=""/169, 0xa9}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/100, 0x64}, {&(0x7f00000005c0)=""/12, 0xc}], 0x9, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x60}, 0x40000000) fchown(r5, 0x0, r6) splice(r0, 0x0, r4, 0x0, 0x26c, 0x0) 05:44:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:39 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x2, 0x3}, &(0x7f0000000040)) 05:44:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:39 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000004c0)='net/ip_vs_stats_percpu\x00') pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:44:39 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000011c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000002e40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0\x00'}) openat$cgroup_ro(r3, &(0x7f0000002e80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000003000)=[{{&(0x7f0000001280), 0x6e, &(0x7f0000001480)=[{&(0x7f0000001300)=""/85, 0x55}, {&(0x7f0000001380)=""/143, 0x8f}, {&(0x7f0000002ec0)=""/5, 0x5}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001540)=@abs, 0x14c3dd7127c5a35c, &(0x7f0000001740)=[{&(0x7f00000015c0)=""/211, 0xd3}, {&(0x7f00000016c0)=""/75, 0x4b}], 0x2}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001800)=""/31, 0x1f}], 0x1, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f00000018c0), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/33, 0x21}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/16, 0x10}, {&(0x7f0000002ac0)=""/58, 0x3a}, {&(0x7f0000002b00)=""/139, 0x8b}, {&(0x7f0000002bc0)=""/82, 0x52}], 0x7, &(0x7f0000003340)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000002dc0), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000003240)=""/230, 0xe6}], 0x1, &(0x7f0000002f80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x5, 0x40000001, &(0x7f0000003140)={0x0, 0x3938700}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clone3(&(0x7f00000031c0)={0x140840000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/243, &(0x7f0000003180)=[r2, r4], 0x2, {r5}}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r6, 0x3a7ea000) 05:44:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sync_file_range(r3, 0xfffffffffffffffe, 0x5, 0x4) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) 05:44:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:58 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x5, r0, &(0x7f0000000180), 0x7f) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x18, 0x0, 0x6, 0xfffffffffffffffe, 0x80000}, 0x0) r3 = getpgid(r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x80, 0x400}}, './file0\x00'}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r10, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) io_submit(0x0, 0x8, &(0x7f0000000840)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x1, 0xffffffffffffffff, &(0x7f0000000200)="6fcb31cc4351bebf70e710ed1364c18492c3b94dd4df144f76bf4b9ac5bd7ef1f8eab9a186eaa8f5bc90af91e01c96c1a4d0f91ec7cd10d94a2e98215e62a3b188a863f0ff0f60e2e71f180054264c3ea2239a", 0x53, 0x8000, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x663913bfe445e33d, 0xfff9, 0xffffffffffffffff, &(0x7f00000002c0)="bfaa4a1f10205511c4e4fc0f8207373933fba46a3dc3ad41b6901364365d595a391e5eedc742bc716ffea1db3eb93bf6cc4252496fac3d7d23edca7e3e73e85cac43b46f234aa31827e6da30385c75a85c8c7fc6ee4042724d04c09db6aa35e4faa9a6d755b5a98047e2d84bd19f2a001e2bef374468a4780ee5441223d34fee4534fe57eb55b36f47d4eb", 0x8b, 0x0, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x6, r5, &(0x7f0000000400)="552e72bc8c5869c41a75b644792b6264131e595978ce92b1fcc348237701e805527dcda791f7002414ba5ea7e383523e6fc22122850c339f3b36916038248222af8e45c55b18b2f957c332a6c7a0885a16", 0x51, 0x9, 0x0, 0x1, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x6e, r7, &(0x7f00000004c0)="68b45d230e722c4fe8909ec637f8ff85aa3d20ca74102f345839179b540f918d", 0x20, 0x9, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x2, r8, &(0x7f0000000580)="502c4a3d8953f22ecb1f9ee2c26d830727d6475b91978950", 0x18, 0x7, 0x0, 0x2, r9}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0xff, r2, &(0x7f0000000640)="95a022215434792390e571be8c1b32f8b5633a658d983f38eaf3baf34dd045e437e1405c3daf551fd49003bb99b4ddf8656c39c8be7f8b76efa718c97ffaec1c9c19efe95fa81cdf5c39858a3ba341ca77d72ebca4", 0x55, 0x0, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000700)="a1194fd3372ef3379d3cae", 0xb, 0x3f, 0x0, 0x6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x7, 0x6, r2, &(0x7f0000000780)="2b85d8b6c7f31f94b0549700a4ce5202d7fa2e7851f9eebb0ef1c87c3190db1974161bd726439aefb618968975b1bda459ef714618b86a3513ecca321fac3a16961a2a444ef312d7dafa494fa733d0d5bd10e0f2824f83518886a80256cde8ec7642", 0x62, 0x1, 0x0, 0x1, r10}]) sched_setattr(r3, &(0x7f0000000000)={0x38, 0x0, 0x30, 0xd9, 0x4, 0x5, 0x81, 0x7fffffff, 0x200, 0x401}, 0x0) 05:44:58 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:58 executing program 3: clone3(&(0x7f0000001200)={0xa0318d00, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000040)={{r1}, 0x6, &(0x7f0000000000)=[0x5, 0x10000, 0x43, 0x9, 0x8, 0x7f], 0x7fffffff, 0x5, [0x1, 0x0, 0x800000000fff, 0xffffffffffffffff]}) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x7) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x102, 0x0) io_uring_enter(r6, 0x59b, 0x87c2, 0x0, &(0x7f00000002c0)={[0xfffffffffffffff9]}, 0x8) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) flock(r5, 0x1) io_uring_enter(r5, 0x2c3c, 0xe32b, 0x0, &(0x7f0000000200)={[0x4]}, 0x8) flistxattr(r1, &(0x7f00000000c0)=""/138, 0x8a) close_range(r4, r0, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000180)) pidfd_getfd(r2, r4, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 05:44:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0xb0, 0x80, 0x9, 0x0, 0x9, 0x2801, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x6, @perf_bp={&(0x7f0000000000), 0x19}, 0xdd19b7a3bb402e5c, 0x5, 0x4, 0x2, 0x8, 0x9, 0x100, 0x0, 0xffff0000, 0x0, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x8) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) dup3(r0, r3, 0x80000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0xce728000) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000000c0)='.pending_reads\x00', 0x200, 0x0) dup2(r6, r4) splice(r0, 0x0, r5, 0x0, 0x26c, 0x0) 05:44:58 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:44:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:44:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x26c, 0x9) 05:44:58 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:44:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:44:58 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:45:11 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x26c, 0x0) 05:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:11 executing program 3: pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clone3(&(0x7f0000001200)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0xfccef2662faff63d) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) flock(r5, 0x0) 05:45:11 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:11 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) ptrace(0x4208, r1) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r2) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r2) pkey_mprotect(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x8, r2) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:45:11 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:45:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:11 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:11 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:12 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:45:12 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/mnt\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:45:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:27 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) r4 = accept(r1, 0x0, &(0x7f0000000000)) clone3(&(0x7f0000000200)={0x812c0200, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/60, 0x3c, &(0x7f0000000140)=""/82, &(0x7f00000001c0)=[r0, r0, r0], 0x3, {r3}}, 0x58) dup2(r4, r5) 05:45:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:45:27 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pidfd_getfd(0xffffffffffffffff, r0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:45:27 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) gettid() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x2, 0x2) fcntl$setown(r1, 0x8, r2) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) 05:45:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:45:27 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000040), 0x4000) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:45:27 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, &(0x7f0000000080)=0x1ff, r2, &(0x7f00000000c0)=0x9, 0x20, 0x3) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x101200, 0x0) lseek(r3, 0x8, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:45:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:27 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:45:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:27 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r4, 0x0, r6) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x9) 05:45:27 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x210000, 0x0) write$binfmt_elf64(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/76, 0x4c}, {&(0x7f0000000080)=""/178, 0xb2}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/101, 0x65}], 0x5) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:45:40 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:45:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:40 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:40 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="0400000000000000fe000000"]) fcntl$setsig(r3, 0xa, 0x41) r4 = open(&(0x7f0000000040)='./file0\x00', 0x218302, 0x10) close(r4) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = fork() ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x2, 0x2) fcntl$setown(r6, 0x8, r7) fcntl$setown(r5, 0x8, r7) fcntl$getown(r4, 0x9) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:45:40 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) r0 = fork() r1 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) pkey_mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x7, r1) ptrace(0x10, r0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/ipc\x00') r3 = pkey_alloc(0x0, 0x1) wait4(r0, &(0x7f0000000000), 0x2, &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, r3) ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:45:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:40 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x0, 0x9e, 0x4, 0x1, 0x2, 0x3e, 0x1, 0x387, 0x40, 0x383, 0x1, 0x1000, 0x38, 0x2, 0x3, 0x8001, 0x5}, [{0x2, 0x8000, 0x7, 0x740, 0x2, 0x401, 0x5246}, {0x5, 0x4, 0x10001, 0x1, 0x148, 0x8, 0x10001, 0x401}], "7d7195982603e05495dc005fa2455523209b7ac31027fb7ba267ca14afd2da5fe98b1ddb0ebd938925ac21a1e347a4db43037cecf099f90908b3f684c3ead03f846e98849915024b7df87dd9b997a8ed04b2a11ff2b0a7a8feda4af20a05ce0ad7a22ec907ac19d65a7fcdc2b9b9fd06dd5d8338ebd89e03db37a86466c1dcbd", ['\x00', '\x00', '\x00', '\x00']}, 0x530) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:45:40 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:45:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:41 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd, 0x11aa7d53, 0x0, 0x0, 0x0, 0x1}, 0x6) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1, {0x0, r8}}, 0x6c0e856e) 05:45:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:45:41 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:45:41 executing program 5: clone3(&(0x7f00000000c0)={0x88318d00, 0x0, 0x0, 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x1, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x26c, 0x0) 05:45:41 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) 05:45:41 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:45:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:45:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:45:56 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x2, &(0x7f0000000100)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f0000000300)='.pending_reads\x00', 0x200, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f0000000200)=""/164, 0xa4}], 0x2) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x1) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) 05:45:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:45:56 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x15) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x26c, 0x0) 05:45:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:45:56 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) r1 = fork() ptrace(0x10, r1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r0) r2 = gettid() r3 = syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r1, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) io_submit(0x0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000000c0)="4843217d3abdcbaa7c43f23853e4aef70bcb6b95d775559adde068a85526f90b161a5eb81af397ec4b87011262656d9a45556b59f7e987604ce4940a7ecceff574ea488b83a7a015177dfab643a53a4b2e88e317992bc2a4dd3d69fdb6648a2d52607df1f8f7a126dfa63a13e6e88839ceb9d37b99f072dc9aa6a6679ca70a22871a8e319ca3bef7b5c2ba60da33235357d4bf54f9a7e7e2ee71d299e118e44b6bf19ee4ff31e3916019b02fcf9b4cd600", 0xb1, 0xaf17, 0x0, 0x2}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, r4, &(0x7f0000000200)="9e527aa3a39dae60c649149291f72b784ff036a1a931ef4b04764fa6cda09e7febfb95bb2c01df3519dc5b8b55ef28ef6ffe84f76506b5c293c3d9d7cd20d94fcc25bdc8bb597aa0bb46a4b3a37640b470dfb941260852fca4902322552a5d7597c0c76a05f74498653cebdf801d1590cf4b546588dcc809e5e9e1164b797cf4822710660284b89b685397342c5ffd0e90e4d601d41d172a1524a74012c798cf75b6cf", 0xa3, 0xa9, 0x0, 0x2, r5}]) pkey_mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000006, r0) 05:45:56 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:56 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:45:56 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x10f) r1 = syz_open_dev$vcsu(&(0x7f0000000180), 0x800, 0x103040) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) flock(r0, 0x4) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4100, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, 'u'}, 0x2, 0x1) dup(r2) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_regs={0x4, 0x1ff, 0x13, "66322e489c8a26e47ff9e1fc4c2425920e9679"}}) splice(r2, 0x0, r5, 0x0, 0x26c, 0x0) 05:45:56 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:45:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:09 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:09 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:46:09 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) flock(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r3, 0x202}, {r4, 0x7220}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x7]}, 0x8) 05:46:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) 05:46:09 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x7, 0x3, 0x7, 0x3, 0x2, 0x3e, 0x9, 0x1d9, 0x38, 0x67, 0x8, 0x4, 0x20, 0x1, 0xcac, 0x6ef, 0x5}, [{0x7, 0x9, 0x6, 0x9, 0x3f, 0x9, 0x6, 0x40}, {0x3, 0x1, 0x6, 0xfffffff7, 0x7fff, 0x0, 0x8, 0x1}], "aa14dc45cf095a9bda344b4fea28146214426a1b184f6dff019f2a0dac9f32be5c23d7c332add4c4708487f61a818c945caf8b04e57c0494d4a7", ['\x00']}, 0x1b2) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:46:09 executing program 4: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') ptrace$poke(0x4, r0, &(0x7f0000000180), 0x1) sched_setattr(0x0, &(0x7f0000000080)={0x38}, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) 05:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:46:09 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f00000014c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x125141, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x26c, 0x0) 05:46:09 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x7, 0x3, &(0x7f0000000240)="11da2f956f08542fea48efb59d8f006d8fe267fe1285e5ef87278ce8ae2810842e44c2c62ca20da907b3933d83d7481651dab569ff56ef511bfc7c39a91818efbfc0394ac0a3d7bd172c1f5c7b0b4420385ee8e6f7bbdb84f5d1ddc75622f980bad0614075", 0x65, 0x8}, 0x211) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2200, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="e45d9f4e6e6f3d236bfb26584056ca4cc4b4ff35db06d72c73ae", @ANYRESHEX=r1, @ANYBLOB="2c64656275673d3078303030303030303130303030303030302c736d61636b66737472616e736d7574653d235cb2262140212c6673757569643d62616563633037642d393432322d613837632d663661622d65656530383336652c6673757569643d37613238613430342d643430002d516565622d616133372d65333864333234322c7375626a5f757365723d5b2c66736e616d653d5c232c736d61636b66737472616e736d7574653d2c2c726f6f74636f6e746578743d757365725f752c61707072616973655f747970653d696d617369672c00"]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) 05:46:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:09 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:46:09 executing program 5: clone3(&(0x7f0000000000)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) r2 = inotify_init1(0x80800) sync_file_range(r2, 0x7fffffff, 0xc98, 0x1) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fstat(r5, &(0x7f00000000c0)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r7, 0x40086607, &(0x7f0000000080)=0x9) 05:46:09 executing program 4: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x7, 0x3, &(0x7f0000000240)="11da2f956f08542fea48efb59d8f006d8fe267fe1285e5ef87278ce8ae2810842e44c2c62ca20da907b3933d83d7481651dab569ff56ef511bfc7c39a91818efbfc0394ac0a3d7bd172c1f5c7b0b4420385ee8e6f7bbdb84f5d1ddc75622f980bad0614075", 0x65, 0x8}, 0x211) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2200, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="e45d9f4e6e6f3d236bfb26584056ca4cc4b4ff35db06d72c73ae", @ANYRESHEX=r1, @ANYBLOB="2c64656275673d3078303030303030303130303030303030302c736d61636b66737472616e736d7574653d235cb2262140212c6673757569643d62616563633037642d393432322d613837632d663661622d65656530383336652c6673757569643d37613238613430342d643430002d516565622d616133372d65333864333234322c7375626a5f757365723d5b2c66736e616d653d5c232c736d61636b66737472616e736d7574653d2c2c726f6f74636f6e746578743d757365725f752c61707072616973655f747970653d696d617369672c00"]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) 05:46:09 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {0xfffffffd}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:46:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 05:46:25 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r0, &(0x7f0000000080)='limits\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fallocate(r4, 0x60, 0x5f67790a, 0x7) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:25 executing program 4: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x7, 0x3, &(0x7f0000000240)="11da2f956f08542fea48efb59d8f006d8fe267fe1285e5ef87278ce8ae2810842e44c2c62ca20da907b3933d83d7481651dab569ff56ef511bfc7c39a91818efbfc0394ac0a3d7bd172c1f5c7b0b4420385ee8e6f7bbdb84f5d1ddc75622f980bad0614075", 0x65, 0x8}, 0x211) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2200, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="e45d9f4e6e6f3d236bfb26584056ca4cc4b4ff35db06d72c73ae", @ANYRESHEX=r1, @ANYBLOB="2c64656275673d3078303030303030303130303030303030302c736d61636b66737472616e736d7574653d235cb2262140212c6673757569643d62616563633037642d393432322d613837632d663661622d65656530383336652c6673757569643d37613238613430342d643430002d516565622d616133372d65333864333234322c7375626a5f757365723d5b2c66736e616d653d5c232c736d61636b66737472616e736d7574653d2c2c726f6f74636f6e746578743d757365725f752c61707072616973655f747970653d696d617369672c00"]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) 05:46:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:25 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:25 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x57, &(0x7f0000000380)={0x0, 0x29e5, 0x0, 0xfffffffe, 0x200000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000900)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r7, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r8 = syz_io_uring_setup(0x620e, &(0x7f00000002c0)={0x0, 0x3fffd, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000, 0x10100) r12 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1a7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r7, &(0x7f0000000000)={0x10080, 0x15, 0x1c}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x8) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:25 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:25 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x10, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:46:25 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r2, 0x0, &(0x7f0000000000)="731ba9cde5b6513b9065bfce0a2b1e7f48eba68ecc276a2959483c1f007348c6ebf1bc3c7864e0751f4946127c59eec60e76a3306d5d51b136f9889c4e9824dbf0f3aedc9db3626155979958c890e3a7a999c038476fc33ccd985bd33af5beee0fcb57e42a1fa469b3", 0x69, 0x24004000, 0x1}, 0xffffffff) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0xb, 0x7, 0x9, 0x0, 0x7ff, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x10001, 0x401}, 0x8000, 0x4, 0xe03, 0x5, 0x5, 0x800, 0x3, 0x0, 0x8000, 0x0, 0x9}, r0, 0xb, r3, 0x9) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) 05:46:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:46:25 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:25 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) fsync(0xffffffffffffffff) 05:46:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:46:25 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setown(r0, 0x8, 0xffffffffffffffff) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:46:25 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:46:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:46:25 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:46:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:39 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:39 executing program 4: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x7, 0x3, &(0x7f0000000240)="11da2f956f08542fea48efb59d8f006d8fe267fe1285e5ef87278ce8ae2810842e44c2c62ca20da907b3933d83d7481651dab569ff56ef511bfc7c39a91818efbfc0394ac0a3d7bd172c1f5c7b0b4420385ee8e6f7bbdb84f5d1ddc75622f980bad0614075", 0x65, 0x8}, 0x211) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r0, &(0x7f0000000200)='.pending_reads\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2200, 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="e45d9f4e6e6f3d236bfb26584056ca4cc4b4ff35db06d72c73ae", @ANYRESHEX=r1, @ANYBLOB="2c64656275673d3078303030303030303130303030303030302c736d61636b66737472616e736d7574653d235cb2262140212c6673757569643d62616563633037642d393432322d613837632d663661622d65656530383336652c6673757569643d37613238613430342d643430002d516565622d616133372d65333864333234322c7375626a5f757365723d5b2c66736e616d653d5c232c736d61636b66737472616e736d7574653d2c2c726f6f74636f6e746578743d757365725f752c61707072616973655f747970653d696d617369672c00"]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x26c, 0x0) 05:46:39 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) sendmsg$IPSET_CMD_DEL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0xe4, 0xa, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0x2, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="492c3dd74ae6"}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x71b}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44801}, 0x10) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r6 = epoll_create(0x7) copy_file_range(r4, &(0x7f0000000000)=0x7, r6, &(0x7f0000000040)=0x9, 0xfffffffffffffff8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$setown(r8, 0x8, r0) clone3(&(0x7f0000000400)={0x200000080, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x11}, &(0x7f0000001500)=""/4096, 0x1000, &(0x7f00000002c0)=""/144, &(0x7f0000000380)=[r0], 0x1, {r7}}, 0x58) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:39 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) fcntl$dupfd(r1, 0x406, r0) 05:46:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 05:46:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:46:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 05:46:39 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x4, 0x8000, 0x81, 0x5, 0x12c08e9d, 0x400000000000000}, {0x5, 0x7, 0x7f, 0x4}], ['\x00', '\x00']}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:39 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 05:46:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:52 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x50480, 0x1ac) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:52 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x7fffffff, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="d878572c217b04ab1763b06fd8fd58ea64472c5dcd5e803871a12206e8f2f45a8713a4bab44ed95adaa13e97024f6be4c34be8ef48abf9f8a510ebf66f7fb4c044f28e0b9e6c78078c2becd9833348ae45607bc445d466ffb79d7b075b9e88874f46d2e812bfdc9eae2454092b6e07381e9535d8d36238feb3c04a59bbd5277924445fb957d014221a1acdc4", 0x8c, 0x5}, {&(0x7f0000000140)="e5da869f5e9cf11bf84d399a464bc6d4639203f82ff5ec2bf6469a26534c19244801fbd58a024bff44b49ae27a9c710d878abe5d560d7be76e4b68b4f912c772e7a6d43bcbe32b70cbc97f51d7b93f356e69209dd4ed508217b54f9d0dcc4bd0c1cd6e73e8e1eeb326ad43a3257f59b98506c8e6ad1205b705ad8139450d95eda1e7bbc4c3dc94c6c1f7c4cc5ba6c8d0035a352cb58f6fffbacaeb4bbf35d9514fbc180b5ec6192ed69e14df82bf69e525644fc100540faa054cbf6fd9b5d417e444e1ac6d52632ba5f505f8c6aa4f3af028b5c007c7e000bbe08943e5bf4929aa96c4c8d16d7a7398d060d4eb4810b2c7d86cffd26bd51d6c", 0xf9, 0x7}, {&(0x7f0000000240)="18718c231703ac0ddcac7f890180f2cfd0bc404dab198ec8808a442d908a4e9cd5a2975b6d0999e20ccbe860b76a0f2b62bd33eaf0f83bbe66f947457b807d6e7694aac448d85e55dce3cda06d75697be67c9552a08eee279e234c9276cfed291a7f2be8ac56cf6b4af05fbe25a914e7828baa1b62ea0c2bc6c89363bffaf099ebba1093220a67e513a30559b6d0291a6690a808f7ebce409ab1b39058e56d2ce46635b360225be2e65d5b3d5206d4fd284ad3e27599bffad11eee81dd", 0xbd, 0x3}], 0x1001000, &(0x7f0000000640)={[{@sb={'sb', 0x3d, 0x400000000000004}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x10010}}, {@subj_user={'subj_user', 0x3d, ':'}}, {@pcr={'pcr', 0x3d, 0x13}}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x5) splice(r0, 0x0, r6, 0x0, 0x26c, 0x0) 05:46:52 executing program 4: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x57, &(0x7f0000000380)={0x0, 0x29e5, 0x0, 0xfffffffe, 0x200000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000900)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r7, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r8 = syz_io_uring_setup(0x620e, &(0x7f00000002c0)={0x0, 0x3fffd, 0x2, 0x1, 0x0, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000, 0x10100) r12 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1a7}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000140)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x2000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r7, &(0x7f0000000000)={0x10080, 0x15, 0x1c}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x8) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:46:52 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:52 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:46:52 executing program 5: clone3(&(0x7f0000000000)={0x88318d00, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x26c) pipe(&(0x7f00000014c0)) 05:46:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:52 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:46:52 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000005a00)={0x4644, 0x2b, 0x729, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="ed52517cf52be46ffd76e0dd4fcd1cf8548860298707c54d2fb4029efbc44c7c68a5e8d1c493342f5173382ddf1939d641c1608d7c3fb23d3bee7a57280ef842937574098756451edcf0598e8331e62e8700e06ac191a7d8d8e44b932df2c3632a043565166c338f53914c5a82fdf4e34b7812f120dba9d27193ce52b67fac311439216d6a31bb1090060c5a28c8a49c6901f829fd6fad2361d0acf44e5e3590113f53cb7c9ef50cff5f9830e8a53cc363919dd97128538212ecbcb52af14db59f50f8382e23db17", @nested={0x4c, 0x59, 0x0, 0x1, [@typed={0xa, 0x78, 0x0, 0x0, @str='--}}}\x00'}, @generic="75067bf4426f1c32a61580d9f51c6f72fd5c97a7377db3a404528805ae30fb493f650ea598bf9dce8214bc0495609eacac6f341bb9401505b79be687", @generic]}, @nested={0x23a, 0x5b, 0x0, 0x1, [@typed={0xa2, 0x8c, 0x0, 0x0, @binary="f3ab7782ef1f47c4d5f0ea9fc8345dff4131f805da458316b1628519de020b6b5f85da561ae590091d8b0184f705c0f726f92353f38af545149004bb7b9a99a37188d956f6f93524496615e590f0173cf4713829853bd56a841e51c6e89670ab8c09d9113edbb72eb8981f4feaebccaedc1261c4ec02f4283a1b4c3d9ca383b16685489d0cf25363cbc1a506e20e4c51f1bc86d823fde23472be66a685d2"}, @generic="9d4da99145f12ba8ff48696473f236da7e978c7f1f311e2fd5c62ed5a6e276d36803d4d010b631543e5166792982fcbf14b141ab6f06157c544ab99c173d6c32aaf526e863f6ee4cce3e6281ff5d51ff2f3b3b89ec1016c448590b5e6be71d8ee710", @generic="da4219d62e", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}, @generic="f4baca7f624c8514618dc4a8e23909e32ee012d34045d8f92485a18b1ca7e761e6aa4cc7a8fc5eec48298e24d05c77eee7bec9f485ec0ecbe1fd00e96bb6d14abc137e41d4de1264dd62e08722fac189c3767f523b254696dd02780669143956e5b643ee59", @generic="a66c58bddbe714b275a92b1a1e9f3364b761b736703eb595454d895195d408f12a44ad42dfd67cfd04cb2c5933872cfbb1fadb00d30baa047812b5263f3b212afce02c3fa192d3038ba0572681c9bbaa58db39ab8941ed31786895ba296c86f9d37551cb2ce53df788fa0c1abc3ebd6d2d3ea15d68e4328b1939535f7ef1088b320b68a7f8ee55ec2c8dbdb40c6b061db0b76cc06740e6ad5e472fac0178e64adcd448b1b1907f4be0ec", @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x5f, 0x0, 0x0, @str='\x00'}, @nested={0x10d4, 0x34, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @generic="c37a634bb8c51df34ce5fa6be6dfcb34b30efa8ae0b140d5ce07b6c89be46f33ce5081467e5ea14310c1d17db63ec65b86bfe53b688db458d91e7699d80ab92cdd4405fa6a63bfaa736d0355f017813fb0d48268b02fee1e6f947868244b1e0815b45097f77f4d451ad2ec9998f9a9ea6ce50f819002292ee60c25b3", @generic="3ddee8e052c9398ad09673ec7cca089824a8617db3050e76aa89ed0753b5a90a8d70eda29f417fb79e6b43488c171990c9ffc02571861377ebf9cae076ffde61d2fe1a9c2381ba1ce7628f77"]}, @nested={0x10f7, 0x67, 0x0, 0x1, [@generic="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", @generic="c546c615ebe579f1df7d62c95f5a190b759fde57c9a705d1bb", @generic="0c85fa0226384bdb2507ee0ed2c2076aa7dcf7287c78c847b4644b22f5c87526f81330b083095f0cc5d9934bfed1cfd3c16ecfaf6eb12119ed3a3d30b59b9c3b1bc105f8e2f9d47a3137c80e13947c35f270196d0b13a3206e5b501e8f7f68ba7a77713e8b82bd91182046047aa084997fd2843872d587d9982f6b974600730836f889ecc13688cae5b7b3d18f9f9bb5f510e145fede4241ea046143b6b3f6849b93f025ba4a22aafad34f5afc9f326ca648418722e38a8d3c4e7efdba0b227bbe5c56c523f43dc078d955749cc311d627539674696bbab6c4c7"]}, @typed={0x1004, 0x4b, 0x0, 0x0, @binary="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"}, @nested={0xf2, 0x1f, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@mcast2}, @generic="f3339ec26567c54cf0d2d79cd122b89ea590a03afc40b3eb5149fbd1d2f77622a96550bdb7d646ca220e5778f7cfed8e0381fbca8718de4387c9046394b91abf3632d9374edb853dfe69a6dd48830365208a9571a98f5e56c3b750bb49c6ced7c20f978a990da51f8b422e5ff17fc5e758b2909076f5c802e48e5f7de0baae48424a06e80ba8c67184262a482605127798587affa3f4ad974d857cacaca2f2d6fa68001d7da9ec975538a0db5ea672aa8fafe5289bdd4084454004c4fa9f522f6ab58ee4a1d6be9e53ef97aee06602244b3614aeee5a75206e26"]}, @nested={0x1014, 0xc, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}, @generic="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", @typed={0x8, 0x64, 0x0, 0x0, @pid=r0}]}]}, 0x4644}, 0x1, 0x0, 0x0, 0x40001}, 0x80) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:46:53 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = epoll_create1(0x80000) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r0, 0x0, r1, 0x0, 0x26c, 0xc) 05:46:53 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:46:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:46:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:46:53 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000080)={0xffffffffffffff17, 0x18, '\x00', 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r5, 0x0, r2, 0x0, 0x0, 0xd) 05:47:06 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000005a00)={0x4644, 0x2b, 0x729, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="ed52517cf52be46ffd76e0dd4fcd1cf8548860298707c54d2fb4029efbc44c7c68a5e8d1c493342f5173382ddf1939d641c1608d7c3fb23d3bee7a57280ef842937574098756451edcf0598e8331e62e8700e06ac191a7d8d8e44b932df2c3632a043565166c338f53914c5a82fdf4e34b7812f120dba9d27193ce52b67fac311439216d6a31bb1090060c5a28c8a49c6901f829fd6fad2361d0acf44e5e3590113f53cb7c9ef50cff5f9830e8a53cc363919dd97128538212ecbcb52af14db59f50f8382e23db17", @nested={0x4c, 0x59, 0x0, 0x1, [@typed={0xa, 0x78, 0x0, 0x0, @str='--}}}\x00'}, @generic="75067bf4426f1c32a61580d9f51c6f72fd5c97a7377db3a404528805ae30fb493f650ea598bf9dce8214bc0495609eacac6f341bb9401505b79be687", @generic]}, @nested={0x23a, 0x5b, 0x0, 0x1, [@typed={0xa2, 0x8c, 0x0, 0x0, @binary="f3ab7782ef1f47c4d5f0ea9fc8345dff4131f805da458316b1628519de020b6b5f85da561ae590091d8b0184f705c0f726f92353f38af545149004bb7b9a99a37188d956f6f93524496615e590f0173cf4713829853bd56a841e51c6e89670ab8c09d9113edbb72eb8981f4feaebccaedc1261c4ec02f4283a1b4c3d9ca383b16685489d0cf25363cbc1a506e20e4c51f1bc86d823fde23472be66a685d2"}, @generic="9d4da99145f12ba8ff48696473f236da7e978c7f1f311e2fd5c62ed5a6e276d36803d4d010b631543e5166792982fcbf14b141ab6f06157c544ab99c173d6c32aaf526e863f6ee4cce3e6281ff5d51ff2f3b3b89ec1016c448590b5e6be71d8ee710", @generic="da4219d62e", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}, @generic="f4baca7f624c8514618dc4a8e23909e32ee012d34045d8f92485a18b1ca7e761e6aa4cc7a8fc5eec48298e24d05c77eee7bec9f485ec0ecbe1fd00e96bb6d14abc137e41d4de1264dd62e08722fac189c3767f523b254696dd02780669143956e5b643ee59", @generic="a66c58bddbe714b275a92b1a1e9f3364b761b736703eb595454d895195d408f12a44ad42dfd67cfd04cb2c5933872cfbb1fadb00d30baa047812b5263f3b212afce02c3fa192d3038ba0572681c9bbaa58db39ab8941ed31786895ba296c86f9d37551cb2ce53df788fa0c1abc3ebd6d2d3ea15d68e4328b1939535f7ef1088b320b68a7f8ee55ec2c8dbdb40c6b061db0b76cc06740e6ad5e472fac0178e64adcd448b1b1907f4be0ec", @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x5f, 0x0, 0x0, @str='\x00'}, @nested={0x10d4, 0x34, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @generic="c37a634bb8c51df34ce5fa6be6dfcb34b30efa8ae0b140d5ce07b6c89be46f33ce5081467e5ea14310c1d17db63ec65b86bfe53b688db458d91e7699d80ab92cdd4405fa6a63bfaa736d0355f017813fb0d48268b02fee1e6f947868244b1e0815b45097f77f4d451ad2ec9998f9a9ea6ce50f819002292ee60c25b3", @generic="3ddee8e052c9398ad09673ec7cca089824a8617db3050e76aa89ed0753b5a90a8d70eda29f417fb79e6b43488c171990c9ffc02571861377ebf9cae076ffde61d2fe1a9c2381ba1ce7628f77"]}, @nested={0x10f7, 0x67, 0x0, 0x1, [@generic="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", @generic="c546c615ebe579f1df7d62c95f5a190b759fde57c9a705d1bb", @generic="0c85fa0226384bdb2507ee0ed2c2076aa7dcf7287c78c847b4644b22f5c87526f81330b083095f0cc5d9934bfed1cfd3c16ecfaf6eb12119ed3a3d30b59b9c3b1bc105f8e2f9d47a3137c80e13947c35f270196d0b13a3206e5b501e8f7f68ba7a77713e8b82bd91182046047aa084997fd2843872d587d9982f6b974600730836f889ecc13688cae5b7b3d18f9f9bb5f510e145fede4241ea046143b6b3f6849b93f025ba4a22aafad34f5afc9f326ca648418722e38a8d3c4e7efdba0b227bbe5c56c523f43dc078d955749cc311d627539674696bbab6c4c7"]}, @typed={0x1004, 0x4b, 0x0, 0x0, @binary="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"}, @nested={0xf2, 0x1f, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@mcast2}, @generic="f3339ec26567c54cf0d2d79cd122b89ea590a03afc40b3eb5149fbd1d2f77622a96550bdb7d646ca220e5778f7cfed8e0381fbca8718de4387c9046394b91abf3632d9374edb853dfe69a6dd48830365208a9571a98f5e56c3b750bb49c6ced7c20f978a990da51f8b422e5ff17fc5e758b2909076f5c802e48e5f7de0baae48424a06e80ba8c67184262a482605127798587affa3f4ad974d857cacaca2f2d6fa68001d7da9ec975538a0db5ea672aa8fafe5289bdd4084454004c4fa9f522f6ab58ee4a1d6be9e53ef97aee06602244b3614aeee5a75206e26"]}, @nested={0x1014, 0xc, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}, @generic="5d4f878f2a4c82a6fe10f618d043281ffe2f6b4a5121a11892daa5511d2befe3e3cd10a0790d835eeed27a659e244ac2b5c6aa0f6249dd1ed8200a326a699b6a70fff0505ebc98ebdf2fd825b667fda33a7cb5d329a579c04083d3d1446e35a80067197956cee934e1aef0768a8603b097118a6fbbb619cd5bdd38b426e051da6f2501c5aaffabdd21931910d952f20d5855c5d771638eb5bfe95d1d0dc9652621f75951cae2f7a89f2a3aef519146b2fa7aa0fdd3d287d4ba6f2b9a23cd2710a9fa6db183e061ff69bb4c4033ef5dd76b46234b6eafb8886c2715aced3b8c5eacfea4af111255355c6b52f8ca23a71ee3fb8ab335bb7412b7cb93b88a0122f197ac176801677ab74de1ced1cd6b9efbca0deecfc365edced0b48768bc4f432d6f6c4c49ad6558104da0ce8323b612eb26e1b7d1b3a2757a0c2d0b1652a2da804cf1e153baf4adf1d8e96e902d34d8397597ca7d5b1e89e3f9aeb2745c0ec4dbc17d4d3c9d0499ac5e03e83b96915f077f9c383c32f57479d41cab302a76d84cab69e382e5de5f7e1e19950ffbf0025f32e71dd1b338022dd9eb1b31ef1dd9bb11bbe97ef1319ac08ef73739a24ac7cfcdfe3fdd552f03813e10d4ca4ea854fe02b5c467cbab95976b4409384043586a3f09ecec776a39148ffa32410935d4ec37e827ddfab6f2028f5432bd735ec0b289f425aac288aaaeb05b0f46a562712c9b8fa72da50cb5dc13d4483da421575a91720abddbabf7299c757dab1251b0df008e088e21f3cfa35db5555e275ba332c51e4cb24bd1b18e24fc8e29f8432438a80166f90131e648fa2bfee1774fb2164f18824ad7b2076319831552da4ceb3588fd26f5c9ddc587f4f0c682b7842dc30b2dc89f5d3f1c2c8603540666867542d58f3cb24ab553634c4e81495575398d12567846cbc3fc389f284bff78975a725f22387b8d4b24e25cb110d199edc01338c78f12246bf1db4362c87ca7d7f2c736e77895ab3e63e5302e875e505158ec0f8d247f1de578f175a3f92f18911dc88f41ce96ec22475aa7a80a0b93fc432c41fcc09941886cb1ebec723f86d884e1aae346ef8db9314ad8ea4b61d7ec146ba73c8c7b002de0704c3e6f6b0bcc320154fe248d9e3cab61e4e8b6b19b6f291b2623da763eda7c3bca72624399b3ba4f306acd5dc4a1070dfa76f4594d9f62083333b49cb476449d138ee488e39a414ac2668084b251695445e755e2bd7948b64377ccea5ab7ac963c7b5982d2fab29d2f57777505b64f6acc558678bc78719b248c61ef54c02f60905865d4eb2ff5857ef4a9333b78b5d5210eb8793450d0d00a29a0939a172f1d900f256cdf5dc8829186032d17bd184fde2b9e5e0d06df72636f23aa8a20b83801db5eb2d4289d0455f30f0a5e7d64970a0ab2f4201bf14fafad1281cfee502046c2dafa286cb755e82a7bb1cadb48fba82326148a4ea751e0e9c09c1f903b6f5aadb499092cea17206ca4582695c54bb45577afae6436720a40eb9bf8d7503a5b162ac0e76f5c61044e01d42d30dd0b90fd30d5a159664344561490e66f50b7680abd9abbbeccfd97db605aa86a5357725bcb89aa3af4d2bdcd245c2fa97a05cac29367346e5848444c05eedd295a094b91da80dd762d77bb7c09c347b64573665a7f7fbbe1b11a9c8b8662203b082a8b8e39dd249e46459e013e80e542dcce59366093c5208658cd301e69715f9f230e5692ddf10d21d3b05925616c33e99f53333104e58249b402a0216e60de8304878324b4270db6b05ace39dbcd5ab603c0550a2a8b7a8e5072e828a0cdf4d1acd2569473e7e980f01c783d9f1dbbb68c5d719fcdec7c16de39597f6cdb83766b9ee20b05ea6118faa445ecc23e9f863aefae849040cc2cc6b3d9d7d7be4031f8e36622bebc2a9c9d5ec4e7425d99e2c8f8023db7ae253b10268b46a24a18b929a1b46b9586d029743a2457608889da9f96e2c6d755dc3c49d1e25bc299da0b5fee80742fd75d897e6c1fc344c85965257caed5733397c65ee189dace644ec440ea5bb4cc1f1de9e44d51283bd964d91bb870171c7765e909ab1e85f1d14f9621b6ae191e0c0ed6cacf9a1a78211df5db9f67d864d8a3aa512b28cf2a17bb9eb5f4d9abee7d561e6e41638f762e903e135cec570fe31d9334a403017454822fd71179cf3f7b5c4b9879127cc2b7fc1261bbf8c374d1b06c11761fa5545d350b95b7fbd0add4cbee794e5d030a8c93bb7746fd94e02e88666eedb44f4a3fa2379145a1a3a4ab321cdc73c55ba6c60e6178bbbe604b2b747f84c8d976b21ea6958aec1e17c70556771bfae7276533858814d6564d74c271e84ae0de7d7ef64dd48ff40d91753b8c4f478abc7e539aea15667619415b9e33be8dcc6df4f074a564f522ad8476cd99db0ab4f619c13eb5052c4aa7f56f8aeb1b81c0adacd0a52cbc4c7684f9c2576c37a6d6d07bb49b4c5560e44a154d8d64561b16d588f8a27b26416d79e7b6db051b66cd35eb16e15c2f0510735966d02e70bbf9c7c6b0b237bacaa296c97bae2a623135e284e7b73151880e720c945f02b419c9977ced22572020b84dd5b581f2841d6b9c80128846d45ec9e900b52f1d80f01a70cb64e80f9843fa6ab1bbeee438c03c27901da4f5a5f7e750cc2f1f3a828ec49b65299a98bb33ce4f314735ab649cfd0579936ed432f3fc8bec03431c35b174795303e9a9f026f6e25c38d6da6b8c90cda0bb1d7d88c43d799dd2416753022061943d93cce2f9cd98d7fd863bd01d52b4af518a566e5df85f64339c08a90196fa9863d9f8dea7e1b53d7c40b46055a5170e355a7fcc532e3d5b4f9f93b508883193148fa6ab43e15879edab16e3c23ad919515107a0a3f042ed1a4ea163fcefa7035064a59d1a60c4407884b913be0c21039f158b52733abab241e097330e50bad356374d520836279119a336cc83b3e4109d0a1732c08790b2ae592c43af453ac798cd27fcc93874d87e0c4d8bc153a9e7faf42723f42f517a94d98219dcc43e9ce5a0d4cdb770b68f488b6bd3fba1415e1d25acf9772b92c303f7a1bddbbba25ad6c8796aeaeecc38c0ce3295830e7883e096a42037238ac28ac13c485941df17e05e550ecd65e11e49045d44c6c87c085b4bf5449db72de4027105c098f6c866cef81fe15a7b0f266a891423a3e8be60cbe8610db4fe2f2affed28ff4133239504822f0ec160c0b296dbeeda40c507842dfea40d215d23b318206aa4b0302eca8df6b6fdc35074b8bab429ac18f2096842056ad2e7c25634cb649f3ad46cb9f2a8ccd1d7c9f7347c09ad173e09dfcc6f6ea28cae37534c751e7ef951e3583cdcb21931599f3a6e478eb4749211e43050a8f5fd2c0d3d91dba8ad7d088589195a9932aff2c58af9cd28bf3bb44ebf49255316f25cdc297d4bef4a40849d931d2e807446cdb1c5014845f57bbe28783cb4e31d9dd833d4ef8168de4f23b0f4dadc6cf02ee81ba2d446b16ffafd8580d2fdbcd5034cf51e32103e8487ec09622ea5a3f3072813ece97519aed6a1bd9e705bd5a32a12dde667126a86bfc5981d3cc14974d98804965a6701da59b58f0ed4deb3810bf34c3bfe93f4fe2ff1fba25a4418fae19ddab934203953f187f665e07f55e46513f523b5a755c35d2b42138b6c423ae311b39dffd37580c4f4e0ec7aee4d289925050752831c9d6320c73a72e0fe154dd0908fcd39203561bc8bbd718d2ebabad449e22789962f187082b8e880b54e92178cd27d096062c03b15a78cb96f2484222d803d3badc0f24a0509939f5ca069fb9304ba96ee2617c33781a4ba3998a706544278b0a171392b04633fd5820a1a6610a8ac6d8db669107759dbd4d1941323176d1c691f3488d7c2c31db79d90a3bbbdabae7b9ca957828d4ac14ccb4fed7e54a6b0ec6cbb6bb25d60f947244e0d1501a91f28e19d1c43d310a11d57ee9511ab8e59e5293e23b3f76f26b43c0890d9592e5948975243f5b977aab6900d3e7f55079d37923f148a7ebfccae7874c5bf8f05491f3169e7011400735655a448970fe2c7fec19d7f062803827f717c375a86c6b9e95f0a77a4e6cebfa0dfa3226e2db343e5598ad912edba87ff83e5b77d25bd9be23dc0db30638b212a861f207ad9e306496dff9d95a7cf9a358641fc4e1961fc47e8c5fefc29d1790241e84fa04edf79d914e878fb1c735e57d46af14641c38a066515044a0f34b4e8ca803627a4a184551a0abfef9a91b374068086d9ae113a45295be8d7970be870cd90ed80e43af69ec6dc2ef416ab7842c0111c9f4456eef5e2e879942a9a15dc65c12641e9f12b880630c0cc37aded0d0d86d6b0b380d50a54233ba834c96ce28a405585f78c3f98cc1e3e4c58e81c4daa9736516b3f7db7e568e1d128ee1aa151a287a3a6f717b4a6f12e7f1f51c2bdcb2f2c4c2e694ac9d91a530e14fce236017d6f83958459aee88efb72464012d89ac041fd2862d47d394b12d077cd3adce3e8f9ada0da65f0a69beb1e43eef864656931d317d8b67cc932f47d8122bde75d1f6602556ce518e44ce6c6379bb178188eb9e0301b199a0e76a403b88e018c118e3f3a29684c20367d868703f7b569365d97c3f922abe4b7db45d597274b23998ba2b459eb4ce8051ba5ede12aaa4511368b80849fd1e5c4dda06676ba66b2da671871e2bc078f671b137ef86a6f98e77f2837ea965fb83e704138261282bea221aaee1ecfeaf53fddfafd6b51810a732efc1231a607db4223a1cc961934e79d97168bf81c2ce972511a3f3122353fef5eb7894dc51ff851c3340290c06e1aab6040d8db874f7407fcce4a7e3bb11f3f9156c8b2efcdf1002b84b5eaf0f7a3e6d93f9605c69966bd4ed5908f447bb251a9a888b2eafa97598d9d001fb7454d08ad0141b6dfd7771948381d8104a12f649479ecc80f5645235bf1cc94f63c911b3bfde69373017325e78992be408e8472c90b64f8c44b89e012ade91224223b8957d771a7006b18e45471eda4315cd16495dabc15563335ae0418cebf5a2deb2e61d7d960fe78e6cd3cd8bddad4113a1cccae59346cc26ca46c6523b2ac523a181ea6cdd86eeb79c2fe5fdbc9da86893e29fb58005815135027b4910954c14f9a60aee04d2844cdb87018b8780f5bf4f9ba365ae2e6110ed2ece644d947ff9a0116a0a17a784d2529128f6baf7dce7ca08211f359b092a39742a50214eb1d3b6094174e54f18899103f77dc9d063ea13a1d2babd6827d7fcf9f1ffe7eaae5cc54d94d4e7fc99ea188880dbc51e174117c34f92faa01a8b1926c574d1a633aa3acd3180f7121bd3fd31fce370da7cfd6515c38254868f13bbe37b8015ff81d726d6b76ac3f5eb4f125cc30f1d80a8887a4ba2aee4a5e7c344bd8d2f20f6219b9f0cb972f29fb6f178294ca4f6a71d2457ae74107f57999865d7240904bdb6123c85b06d7c2808df9e92af3681a68158998b0e2a0ef8353a35508d3f60215fd1f15e1dd54444d411b2ff51596bcb39ad38625e0337f1e0d08ab58d78e73dec1365c122b1917ea75792ae66adeaf49dfe61a2a4d8a37d9308c956a4ab67d323c719e4a712fc343a5d1819240115395f590695ca749f45ccdcabdb10b0ef5d1eedb3951a923c7026cefd1e9de5120b4e9d52b0c629a149ec2f064bc8a9d7dc0fb2071bd0dd4b6fa75afae60b7d688cb827935039ccafe3e12bd6a58d4b828054ab5af91f33eebe2ceae8993c74745dbaa6e1c16f3289739f50e7fc2cd4fa91e589134a6fbe1ce21d6967d83f653f7", @typed={0x8, 0x64, 0x0, 0x0, @pid=r0}]}]}, 0x4644}, 0x1, 0x0, 0x0, 0x40001}, 0x80) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:47:06 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:06 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff01000070346ab0535c3c8457b7e78c2f6a22f0e51427350930be4e737a814c04aaac39de0aecb5b995e3d53f3f8289ff955e12", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./fi\\e0\x00']) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x80500, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000100)={0x2, 0x1, 'client1\x00', 0xffffffff80000000, "d970fddd23a1041e", "b2e9043541e51a2d2bda5364badecf8516048561da8c7f8245a2719da84bd33f", 0x3ff, 0x1}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x100020, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@dfltgid}, {@version_9p2000}], [{@dont_appraise}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x35, 0x64, 0x33, 0x32, 0x30, 0x37, 0x35], 0x2d, [0xd8f3ef899d6dc7cc, 0x65, 0x64, 0x66], 0x2d, [0x37, 0x33, 0x38, 0x62], 0x2d, [0x62, 0x38, 0x63, 0x31], 0x2d, [0x34, 0x37, 0x61, 0x39, 0x38, 0x36, 0x33, 0x34]}}}, {@appraise}, {@permit_directio}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, '.pending_reads\x00'}}, {@uid_gt={'uid>', r8}}]}}) splice(r7, 0x0, r6, 0x0, 0x100004f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x381400, 0x0) 05:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x2c}}, 0x0) 05:47:06 executing program 5: clone3(&(0x7f0000001200)={0xc8318d00, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff0c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r1, r1, 0x0) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="0311b9e173e5235b0000000900000000"]) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x8b, 0x0) 05:47:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:47:06 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:06 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r1, 0x0, r3, 0x0, 0x45, 0xa) syz_open_procfs(r0, &(0x7f0000000000)='fdinfo/4\x00') 05:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x2c}}, 0x0) 05:47:06 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f00000014c0)) 05:47:06 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:47:06 executing program 3: clone3(&(0x7f0000000000)={0x94310c00, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, 0x0, 0x6c6f2c485a3faa24}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_evm(r2, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x5, 0x2, 0xa, 0x6, 0x43, "8b81ce3bb8711416097b80218a2238ecc7ec2a81315ed072b8583f419e27b971a7c8290282a706e68e109bb99ada319837a0eaa2e99e90862054d74fc2b66cef1e40e7"}, 0x4c, 0x2) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:47:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x2c}}, 0x0) 05:47:06 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fork() ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x2, 0x2) fcntl$setown(r1, 0x8, r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) clone3(&(0x7f00000004c0)={0x80000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x3d}, &(0x7f00000002c0)=""/246, 0xf6, &(0x7f00000003c0)=""/125, &(0x7f0000000440)=[0x0, r2], 0x2, {r3}}, 0x58) clone3(&(0x7f0000000180)={0x100030280, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x35}, &(0x7f00000000c0)=""/33, 0x21, &(0x7f0000000100)=""/20, &(0x7f0000000140)=[r0, r0], 0x2}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x26c, 0x0) 05:47:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:07 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000005a00)={0x4644, 0x2b, 0x729, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="ed52517cf52be46ffd76e0dd4fcd1cf8548860298707c54d2fb4029efbc44c7c68a5e8d1c493342f5173382ddf1939d641c1608d7c3fb23d3bee7a57280ef842937574098756451edcf0598e8331e62e8700e06ac191a7d8d8e44b932df2c3632a043565166c338f53914c5a82fdf4e34b7812f120dba9d27193ce52b67fac311439216d6a31bb1090060c5a28c8a49c6901f829fd6fad2361d0acf44e5e3590113f53cb7c9ef50cff5f9830e8a53cc363919dd97128538212ecbcb52af14db59f50f8382e23db17", @nested={0x4c, 0x59, 0x0, 0x1, [@typed={0xa, 0x78, 0x0, 0x0, @str='--}}}\x00'}, @generic="75067bf4426f1c32a61580d9f51c6f72fd5c97a7377db3a404528805ae30fb493f650ea598bf9dce8214bc0495609eacac6f341bb9401505b79be687", @generic]}, @nested={0x23a, 0x5b, 0x0, 0x1, [@typed={0xa2, 0x8c, 0x0, 0x0, @binary="f3ab7782ef1f47c4d5f0ea9fc8345dff4131f805da458316b1628519de020b6b5f85da561ae590091d8b0184f705c0f726f92353f38af545149004bb7b9a99a37188d956f6f93524496615e590f0173cf4713829853bd56a841e51c6e89670ab8c09d9113edbb72eb8981f4feaebccaedc1261c4ec02f4283a1b4c3d9ca383b16685489d0cf25363cbc1a506e20e4c51f1bc86d823fde23472be66a685d2"}, @generic="9d4da99145f12ba8ff48696473f236da7e978c7f1f311e2fd5c62ed5a6e276d36803d4d010b631543e5166792982fcbf14b141ab6f06157c544ab99c173d6c32aaf526e863f6ee4cce3e6281ff5d51ff2f3b3b89ec1016c448590b5e6be71d8ee710", @generic="da4219d62e", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}, @generic="f4baca7f624c8514618dc4a8e23909e32ee012d34045d8f92485a18b1ca7e761e6aa4cc7a8fc5eec48298e24d05c77eee7bec9f485ec0ecbe1fd00e96bb6d14abc137e41d4de1264dd62e08722fac189c3767f523b254696dd02780669143956e5b643ee59", @generic="a66c58bddbe714b275a92b1a1e9f3364b761b736703eb595454d895195d408f12a44ad42dfd67cfd04cb2c5933872cfbb1fadb00d30baa047812b5263f3b212afce02c3fa192d3038ba0572681c9bbaa58db39ab8941ed31786895ba296c86f9d37551cb2ce53df788fa0c1abc3ebd6d2d3ea15d68e4328b1939535f7ef1088b320b68a7f8ee55ec2c8dbdb40c6b061db0b76cc06740e6ad5e472fac0178e64adcd448b1b1907f4be0ec", @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x5f, 0x0, 0x0, @str='\x00'}, @nested={0x10d4, 0x34, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @generic="c37a634bb8c51df34ce5fa6be6dfcb34b30efa8ae0b140d5ce07b6c89be46f33ce5081467e5ea14310c1d17db63ec65b86bfe53b688db458d91e7699d80ab92cdd4405fa6a63bfaa736d0355f017813fb0d48268b02fee1e6f947868244b1e0815b45097f77f4d451ad2ec9998f9a9ea6ce50f819002292ee60c25b3", @generic="3ddee8e052c9398ad09673ec7cca089824a8617db3050e76aa89ed0753b5a90a8d70eda29f417fb79e6b43488c171990c9ffc02571861377ebf9cae076ffde61d2fe1a9c2381ba1ce7628f77"]}, @nested={0x10f7, 0x67, 0x0, 0x1, [@generic="c79a27f46a98d193f15b108ae5dbf595e25ab32a8920d0dace60ac871d327698e347cd7a821fee01e61d56ba7cd241e8702b8abfc5fc2efc21fc0fdb72200165aeeeaacd463f69793e956ad7a5c02d8d353a6c4478cf8a12f24bf1b5625e2a5d15c1823b4852cf58101d69724155f63da369b1cde8ae4d8a22176dcc6a54beb3117f29286b03e57bb1cc5a598a4e4fb7c3e7fcf6a17dc78ff19a1468539a558c82b2acd925797b1ba5cd5ce02ff6076abc5a9399b54ba639855cd262e492b9bcd1374cfad012e980942fa7d3f0522b43351395da2f3b05a2255ba098673655a9c7d0e2e5d6be525bb6d8a4d71eb82c812d06f36ca1a911e3a277a8bd99d6a3f0f9bff0d55f19bba44e89549cea0ebd9ff3cac0505bd966d9605d5a7f8e78a75d0f916c72dc278934abc22f4bd50fff17c1791170cbff33e467a2503c0f7f2512f2ab8d56f54f2bab39d01fa3eedc6dec07d1928b26c5ebd486ab3a584238a9395bfe9ca75455bf524687008628474c878407bb25789fa412516bd34e006e7366a526e674484bf9064f3f0ab9b164c0a592ddb3dc36668ec52cf2a129604016eb9c321acb4622c345ed92de242a24180cca490d32980ab5e3a95a2535fea690df74758770ddba45119c450645cfe7e7aad45377fdcf527b9aaf824e166768bb4f8e541bab8e80d2fc2172a1bb6b54cfeda271ba4ecae540e25ddf078be3446bb5fb7943d15482fcda1d2d473f3186536df991e39837dcccc1b3c434dd8af1617348fd57303efd78a75817fbc6c3d705bf76a05a6c3201990f4823ae2815b586fff6224b108a6822b49e8389b2cb8748ef81a4b460a66098c7a289bb063095f434862fc5fc23f758dd2f97361f3437cd8b930f2925c7242f8db2f20f1db89fe030ce52813d4566a18b2fa82650204256e49230e5ab7177471a035f1b7ddab2c96e933caaf91ca0dfcd5b97c946e98ecd4b250977929ad134b690df47418255822dce4c8455856863c50112cd678bf5e4334826426f1e2b4467280a11709a8e9bf929fd7be300b4cd2c670adcd865b7207e378b4abd28550fc49736dbf456c1e052a04e4adfc84600e6afbac03782eaaf280f8e13f91dfbbc8236f08f2cd1eb4224a5468cb4ab205c61f05b982430b5349787ded7876c43a09d02f9b063fc1980cc8f5885302b845d4fe8ecfacde14236b306e98fedb99c4cc52c474122886e7841ae717913796205e651f626a514ee34e7fe478020d68ad1b93a8a17c498dc95dd1cff81054c5158db4fe13de42db8b6a1a9e0c24c3c784a082d80e436cf4654488f1f87dbfb9c2281eb23030959479ed04026c8d1be0874667895f00b7f93c7294ac1b0cbe859237a3e90657088cfdd07358972fcf5297bb431d561cdd5fe5c895a2e9b8aba173294a733c4c2d55a332dd7dcdab2498f7afa1e09333d187ba2bdb1525691dfec9bfd56765b05196fceab9bad81e3ea7d2aa940d5f0bfdd12ca249d97fff1b3630d58c73d355f14b99516781c435b0626bb0ce43e72ff8cec04c3eba28966073f40c20fa4b41cb8cc07223d49a74f166b67ba2fef78de114df7322d49bbe470b67669f2748672a8dbdc71d2910ab0f04623b8aa85d4b09776617ce45678be1e4e312ad03651db9c9d9b0b7d776cb407e560a0fefe0a5399b4b7adc4f5f14db55f2de88cb632b0bd1735d5ed437f2e3b9364c40ba629349e4e7b25000523ecc816e5a4feafb524434d1e5a3873e778f018e7d66d4dae1e0f69ffab59b6c6b76396b5ab5d5725820f2be3eeba40da0c01023236f4c2b09f749ec9c76a81d5f752295cd592e8501dcbe6c7c8c629e4f16214a32bdc9eb7dd5b9b9c9cf82003064b4d422bbc0d3c7bb5c146124adf061d1df8ca3563d8aed0edafb3be14f400430fd4532217c016d7b7ad6b3b4e3660b2bc1604d8f8ea990bdd991fa77187296f9516511675ef26fac9c07507c04043d9df2c38ad5a82a0585deb0081b75f45b5d14da7141342a90566cb0de85bbcdee401bfeb3423819a4df41c692a6403a897396435488df9cbec96d067bd9753e2abea01255930cdd8bb1f3558e3476657f8904079b5ba314c3e22d3357a6c8026f9779ad0202e16744d01d82b3b5aba7934c949f337b8ab31dcd6c60ba88c1c03032fae9fe22b428df4c86474720e411bd5a923831e59f8cc0ae6136f09ee335293ffc790d56a82f3cfb1920f118a77f4cd4b868fe1bc420f40ad38a3d2256a1df930c60274011edb117a114ba041e56ac1354f8d7268289a832a21dc8a9aefa64ad28acf712b4afd2f535a6a1d8da5c7409e57145a4e53f0b27aab44bb55f26b13edc0bf92eb65af040c93e4139ebf32f63cec85ffeb90e1b512f202799efaba4cdb8c598b52864236f16b8ff98be422e5244281fbd9d89d521afb3fa6740c53be03a01f653705d8dc3a8e02950753375261606b18cdb63f8197fba72b745116473fb3f8243a8fe2e3b484501ad1e43f4447a9c4a0567ff110ea9ce4a9b3c66e811a2ae9f135c2ffca908e74d09d7d6ab8635d962b995ef24a0bfd3a61b68d6f56690ee88ec5822c6b5862386f0f111f1baae56b8e8520a7371ccfed488571f0e5e5325cfd2e6b601eaaace4fc88ec21808fe5725fcb26a0ea3d5d0006e01bf26bc36886823419c70f22f4e8470c6fe6f9732f5f61597b68c9161a223146729729554183f0f905314c4e16473cdb58f8b66130eb7c9f28e164c553a62ff2a5dd4fef0722e8d89960ce64c5b1166d9f3eca212eaf704c695dfae35ca7de2fec96defc281a7ae672e37beb3aa2b02e9e7ce8d554b694555effa19db095c2d64a2c177e990ec59a6e0f9d6c977d5e8aba07e894e6c80c67e49448afc26dabd6afc9410433dee822f0cde62d53c749ac5c5ea8e64f7377eb01af959bf84b0b23802854ba88b6c7f97219128064e081c80d86ff96e2c3a2c011c14f3e8ddda4f0350b97b57a059aa5f96da80f470b4803ffa5ba2ed86a14a95f4737e5b55570188bef512f2fc89da1581b684fb2d00e47fcf19c8f4787df7a0123ae2391fdd77a5e03e6c10304cae44d4b195b252cada83a40e2b0e5233f320846de84f1e96da6f951297d64a4ed9a7a3a5b7611f4e8155c66139f7c798b11731d8bf041504b0514e91154f0a0dbbb4a99b0544d7a3583f62c3435108368cdd6255d2630f5f8a299b269a894e7a2fa04620c3582c33482084169040499f9557c2321906e111c594507e275ee721a93aa1a85b33ebbf88ff895ed83852eb7c0c043e8e16cfa3b55ff1a614806b5ab7cc3deea239d8d535e5bd389b426a0847d39f3b10d288f55d3df54c5b38f07fe32a3f575d38fa8ae892f7a53407a1b5c1a960a5845f3f0bf0f7280c0e518ca9fd7a82ad7c55985f3ee824452afc55a61fc94a327668913879cb7525aab77d54c62a76c7c105b010ce99a79adcc2c9289ea8b8467e9496eb11e992025150ce251ab9327f08b69ee7159c87ae10eefc36f143a6577b97617d50408c82a7b25feaea5d8823f7fd9885cbbec0e5c40b452fa572413afcb777fc0a71a208176b8017c6eff2373746e6cd0509b50139a941186cbdb69285fdcb2b6d95f58317027ed7193b64b88e741847ebb970f2811245ebe84f0a5fde25a1cebe426d791169d001429a43b2e22841c29dad1e8efb6ff9a0a097c657b9ab860639e8b735223c3eb3af38dd65f498b861a10dac7e8ac7c9c6fe2c6eca438403a7e5e52707e861e623e4de77c37ac0c3d9c1b6d1a660f588fb5a1863dc5d01164a97416d6fedb658d53d415a6248b460bdc9422b7e83d6e1a965d23f6ab0aed00f142f4312f28d1c73783583394aef59271b0c4544efd80208bb1f2ca0ca5e1da06fc491aa910d78d65c72fa3b5298a855fd1f5a55771020579b0c886a5d07db003bbbfd3cf60457f3648a23e6fd5f72427fbe7fdd06699f83385b4dea8655ddb13c9a2c4cd773e82ab010537df3954c4c7134072f7aeeab2fee4b0413bca378c8a93a4a86419b2001a081da1f94b5c90a0e1115a0ca29906ceeb4f01615e177cbfc28c3b91849da1950e6c899afe5dede26ce0f47756bcbc41b616ae66cd5aa7e05f17bd3cd71e962f1afc4ca0e3f339c977f440f304b4d623fe90d05ea3a648929b36cf626cc4040c787f7160635d65c30547a08b247bea0a8cc7c6b44c1b9cdfbbe9e86b78456d4c3a5299c93ab29c8920bc4771a9432de1ce8db079889eb4a1e331853966c820f733dcca8f652bd4c889419cc96f6b3889fa6b57093e3d112116234f50cf474f67201c449701d289999d356c9ffcf3cf69c1cd0927b843a943c11b0d13dc49eba4c6aca4691153ce34dc4384d3bd3bad96e6677cf0555129c8d0db6aee1dac9957d767f0c01453944877a101e9196bac573f1ccd6c71ca1d37bb0292d1c5a31674cd0ec275cfcbe8cd5b139fd52696246d707894e977b113c742c411659f432e50f8019f95a752d963786f40ce6136dd1b20bffa2ffbffde1eef4e86569104c9ffc739bff2e3c0cf22648425856207cf0d88defa0b19c3c1034f7899c44e10b6dd9763270f3fd335adb983d294e715b5501226f7d10a7431fbdc913ace900c817bc94bc55c85c53bcf0ffd989492f67dc17e70a29ba1cad548df603f772ffcbf0d9fa18fe2504a19a544ce0c8dbfe9ddad8b16c84f8501c3cb8dcf649570c32b52c2f561b81d4bb55a0815690b93fdd49d9691b84a4aeb5acb7df6ec95aa4aa175c58a1ca67bdab1fabe7533dcf1222649205d0dc13dc4564f074a70622e98a1f5fa7d8ba26496f2181fb8d2f96bbed79b29abb728d3abdfb27020e11713a8412572a857ce3d3c782707b5bbbf5051411201393d69cd34dd6c0820d359806150e639c1b9458c8ba0c02f4a5b28f097d2b44fc89b1e0a608092ae9f15aa22049dde791179f96906a62de343f0ef800b526cf446c9f56ae7b394c477c0a9b37e44cf4d5fc7dac5433ea8ef1c843f83662f800b99a96803ce58d706df6004599602f640f0d105f8068dda9080ec64f219074cd46555dbfeed29d58f2d3984d22c3518ff24e00201218be488d5410ed99ea4f9e0726eea57d1ed998b8d4fd0d3b3f5087961211d761fb4e40c19bf5b00e3d49ce01c935be48cfcc81d0ec50223408a466565f50f93c75df48474e96c55fd0263c203a544e60ddab3332dccaf4256629e47ce15c87ca2dfbbf6f5f49e53c13e288def99ac1f6605490272a3d96ce9a9187af1fa51bc617c550e0909edc52db99002062e2b0fa9c35bc2c21c21cc060ca0c3123e6beaf32edba64e753b4047710e560efbf0aa7dcee8f1f5a98f32af5b4a6e94dc7148434a2b04054521df9099658f478ec2daa4612ef7757316434c66f7bacb8c8d29d3f0bc5b2b64c20c29a48bd43bfbeac9b909dc5329443b74a8f79faffc7595ae349ae35861c1209a877c483ef7f6ea77321d6875c3a3d11b5a196d44a5cff4af92a1fc962322e1c6507474791cfcc2e84b6893444c91ef57c0f0733d70ffe4a5fe3241962a9b84eb01ed155d2eb47a105693ebc4e9095a308050c55924bcc38f9b67e2c99d385fad17f4f92f001960b4d66d5db1e28a9fe9f53704b2a9961487d161c3be354e95fc9332c97688b2381513b1849f7f6b38866622b30e8da992c102c1e31495bb87e0a3a2354c7a3a1116c9a59efc876689e3826de3b6addc382c23a4d69dadb5f9e174c15c84abfda9a525af524cd85ec6833076d227498d1a4e7a649079539d64ad1501b5bf55e997eda9669f5c71d687c6a9071e9d4d3464f170e7ed", @generic="c546c615ebe579f1df7d62c95f5a190b759fde57c9a705d1bb", @generic="0c85fa0226384bdb2507ee0ed2c2076aa7dcf7287c78c847b4644b22f5c87526f81330b083095f0cc5d9934bfed1cfd3c16ecfaf6eb12119ed3a3d30b59b9c3b1bc105f8e2f9d47a3137c80e13947c35f270196d0b13a3206e5b501e8f7f68ba7a77713e8b82bd91182046047aa084997fd2843872d587d9982f6b974600730836f889ecc13688cae5b7b3d18f9f9bb5f510e145fede4241ea046143b6b3f6849b93f025ba4a22aafad34f5afc9f326ca648418722e38a8d3c4e7efdba0b227bbe5c56c523f43dc078d955749cc311d627539674696bbab6c4c7"]}, @typed={0x1004, 0x4b, 0x0, 0x0, @binary="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"}, @nested={0xf2, 0x1f, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@mcast2}, @generic="f3339ec26567c54cf0d2d79cd122b89ea590a03afc40b3eb5149fbd1d2f77622a96550bdb7d646ca220e5778f7cfed8e0381fbca8718de4387c9046394b91abf3632d9374edb853dfe69a6dd48830365208a9571a98f5e56c3b750bb49c6ced7c20f978a990da51f8b422e5ff17fc5e758b2909076f5c802e48e5f7de0baae48424a06e80ba8c67184262a482605127798587affa3f4ad974d857cacaca2f2d6fa68001d7da9ec975538a0db5ea672aa8fafe5289bdd4084454004c4fa9f522f6ab58ee4a1d6be9e53ef97aee06602244b3614aeee5a75206e26"]}, @nested={0x1014, 0xc, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}, @generic="5d4f878f2a4c82a6fe10f618d043281ffe2f6b4a5121a11892daa5511d2befe3e3cd10a0790d835eeed27a659e244ac2b5c6aa0f6249dd1ed8200a326a699b6a70fff0505ebc98ebdf2fd825b667fda33a7cb5d329a579c04083d3d1446e35a80067197956cee934e1aef0768a8603b097118a6fbbb619cd5bdd38b426e051da6f2501c5aaffabdd21931910d952f20d5855c5d771638eb5bfe95d1d0dc9652621f75951cae2f7a89f2a3aef519146b2fa7aa0fdd3d287d4ba6f2b9a23cd2710a9fa6db183e061ff69bb4c4033ef5dd76b46234b6eafb8886c2715aced3b8c5eacfea4af111255355c6b52f8ca23a71ee3fb8ab335bb7412b7cb93b88a0122f197ac176801677ab74de1ced1cd6b9efbca0deecfc365edced0b48768bc4f432d6f6c4c49ad6558104da0ce8323b612eb26e1b7d1b3a2757a0c2d0b1652a2da804cf1e153baf4adf1d8e96e902d34d8397597ca7d5b1e89e3f9aeb2745c0ec4dbc17d4d3c9d0499ac5e03e83b96915f077f9c383c32f57479d41cab302a76d84cab69e382e5de5f7e1e19950ffbf0025f32e71dd1b338022dd9eb1b31ef1dd9bb11bbe97ef1319ac08ef73739a24ac7cfcdfe3fdd552f03813e10d4ca4ea854fe02b5c467cbab95976b4409384043586a3f09ecec776a39148ffa32410935d4ec37e827ddfab6f2028f5432bd735ec0b289f425aac288aaaeb05b0f46a562712c9b8fa72da50cb5dc13d4483da421575a91720abddbabf7299c757dab1251b0df008e088e21f3cfa35db5555e275ba332c51e4cb24bd1b18e24fc8e29f8432438a80166f90131e648fa2bfee1774fb2164f18824ad7b2076319831552da4ceb3588fd26f5c9ddc587f4f0c682b7842dc30b2dc89f5d3f1c2c8603540666867542d58f3cb24ab553634c4e81495575398d12567846cbc3fc389f284bff78975a725f22387b8d4b24e25cb110d199edc01338c78f12246bf1db4362c87ca7d7f2c736e77895ab3e63e5302e875e505158ec0f8d247f1de578f175a3f92f18911dc88f41ce96ec22475aa7a80a0b93fc432c41fcc09941886cb1ebec723f86d884e1aae346ef8db9314ad8ea4b61d7ec146ba73c8c7b002de0704c3e6f6b0bcc320154fe248d9e3cab61e4e8b6b19b6f291b2623da763eda7c3bca72624399b3ba4f306acd5dc4a1070dfa76f4594d9f62083333b49cb476449d138ee488e39a414ac2668084b251695445e755e2bd7948b64377ccea5ab7ac963c7b5982d2fab29d2f57777505b64f6acc558678bc78719b248c61ef54c02f60905865d4eb2ff5857ef4a9333b78b5d5210eb8793450d0d00a29a0939a172f1d900f256cdf5dc8829186032d17bd184fde2b9e5e0d06df72636f23aa8a20b83801db5eb2d4289d0455f30f0a5e7d64970a0ab2f4201bf14fafad1281cfee502046c2dafa286cb755e82a7bb1cadb48fba82326148a4ea751e0e9c09c1f903b6f5aadb499092cea17206ca4582695c54bb45577afae6436720a40eb9bf8d7503a5b162ac0e76f5c61044e01d42d30dd0b90fd30d5a159664344561490e66f50b7680abd9abbbeccfd97db605aa86a5357725bcb89aa3af4d2bdcd245c2fa97a05cac29367346e5848444c05eedd295a094b91da80dd762d77bb7c09c347b64573665a7f7fbbe1b11a9c8b8662203b082a8b8e39dd249e46459e013e80e542dcce59366093c5208658cd301e69715f9f230e5692ddf10d21d3b05925616c33e99f53333104e58249b402a0216e60de8304878324b4270db6b05ace39dbcd5ab603c0550a2a8b7a8e5072e828a0cdf4d1acd2569473e7e980f01c783d9f1dbbb68c5d719fcdec7c16de39597f6cdb83766b9ee20b05ea6118faa445ecc23e9f863aefae849040cc2cc6b3d9d7d7be4031f8e36622bebc2a9c9d5ec4e7425d99e2c8f8023db7ae253b10268b46a24a18b929a1b46b9586d029743a2457608889da9f96e2c6d755dc3c49d1e25bc299da0b5fee80742fd75d897e6c1fc344c85965257caed5733397c65ee189dace644ec440ea5bb4cc1f1de9e44d51283bd964d91bb870171c7765e909ab1e85f1d14f9621b6ae191e0c0ed6cacf9a1a78211df5db9f67d864d8a3aa512b28cf2a17bb9eb5f4d9abee7d561e6e41638f762e903e135cec570fe31d9334a403017454822fd71179cf3f7b5c4b9879127cc2b7fc1261bbf8c374d1b06c11761fa5545d350b95b7fbd0add4cbee794e5d030a8c93bb7746fd94e02e88666eedb44f4a3fa2379145a1a3a4ab321cdc73c55ba6c60e6178bbbe604b2b747f84c8d976b21ea6958aec1e17c70556771bfae7276533858814d6564d74c271e84ae0de7d7ef64dd48ff40d91753b8c4f478abc7e539aea15667619415b9e33be8dcc6df4f074a564f522ad8476cd99db0ab4f619c13eb5052c4aa7f56f8aeb1b81c0adacd0a52cbc4c7684f9c2576c37a6d6d07bb49b4c5560e44a154d8d64561b16d588f8a27b26416d79e7b6db051b66cd35eb16e15c2f0510735966d02e70bbf9c7c6b0b237bacaa296c97bae2a623135e284e7b73151880e720c945f02b419c9977ced22572020b84dd5b581f2841d6b9c80128846d45ec9e900b52f1d80f01a70cb64e80f9843fa6ab1bbeee438c03c27901da4f5a5f7e750cc2f1f3a828ec49b65299a98bb33ce4f314735ab649cfd0579936ed432f3fc8bec03431c35b174795303e9a9f026f6e25c38d6da6b8c90cda0bb1d7d88c43d799dd2416753022061943d93cce2f9cd98d7fd863bd01d52b4af518a566e5df85f64339c08a90196fa9863d9f8dea7e1b53d7c40b46055a5170e355a7fcc532e3d5b4f9f93b508883193148fa6ab43e15879edab16e3c23ad919515107a0a3f042ed1a4ea163fcefa7035064a59d1a60c4407884b913be0c21039f158b52733abab241e097330e50bad356374d520836279119a336cc83b3e4109d0a1732c08790b2ae592c43af453ac798cd27fcc93874d87e0c4d8bc153a9e7faf42723f42f517a94d98219dcc43e9ce5a0d4cdb770b68f488b6bd3fba1415e1d25acf9772b92c303f7a1bddbbba25ad6c8796aeaeecc38c0ce3295830e7883e096a42037238ac28ac13c485941df17e05e550ecd65e11e49045d44c6c87c085b4bf5449db72de4027105c098f6c866cef81fe15a7b0f266a891423a3e8be60cbe8610db4fe2f2affed28ff4133239504822f0ec160c0b296dbeeda40c507842dfea40d215d23b318206aa4b0302eca8df6b6fdc35074b8bab429ac18f2096842056ad2e7c25634cb649f3ad46cb9f2a8ccd1d7c9f7347c09ad173e09dfcc6f6ea28cae37534c751e7ef951e3583cdcb21931599f3a6e478eb4749211e43050a8f5fd2c0d3d91dba8ad7d088589195a9932aff2c58af9cd28bf3bb44ebf49255316f25cdc297d4bef4a40849d931d2e807446cdb1c5014845f57bbe28783cb4e31d9dd833d4ef8168de4f23b0f4dadc6cf02ee81ba2d446b16ffafd8580d2fdbcd5034cf51e32103e8487ec09622ea5a3f3072813ece97519aed6a1bd9e705bd5a32a12dde667126a86bfc5981d3cc14974d98804965a6701da59b58f0ed4deb3810bf34c3bfe93f4fe2ff1fba25a4418fae19ddab934203953f187f665e07f55e46513f523b5a755c35d2b42138b6c423ae311b39dffd37580c4f4e0ec7aee4d289925050752831c9d6320c73a72e0fe154dd0908fcd39203561bc8bbd718d2ebabad449e22789962f187082b8e880b54e92178cd27d096062c03b15a78cb96f2484222d803d3badc0f24a0509939f5ca069fb9304ba96ee2617c33781a4ba3998a706544278b0a171392b04633fd5820a1a6610a8ac6d8db669107759dbd4d1941323176d1c691f3488d7c2c31db79d90a3bbbdabae7b9ca957828d4ac14ccb4fed7e54a6b0ec6cbb6bb25d60f947244e0d1501a91f28e19d1c43d310a11d57ee9511ab8e59e5293e23b3f76f26b43c0890d9592e5948975243f5b977aab6900d3e7f55079d37923f148a7ebfccae7874c5bf8f05491f3169e7011400735655a448970fe2c7fec19d7f062803827f717c375a86c6b9e95f0a77a4e6cebfa0dfa3226e2db343e5598ad912edba87ff83e5b77d25bd9be23dc0db30638b212a861f207ad9e306496dff9d95a7cf9a358641fc4e1961fc47e8c5fefc29d1790241e84fa04edf79d914e878fb1c735e57d46af14641c38a066515044a0f34b4e8ca803627a4a184551a0abfef9a91b374068086d9ae113a45295be8d7970be870cd90ed80e43af69ec6dc2ef416ab7842c0111c9f4456eef5e2e879942a9a15dc65c12641e9f12b880630c0cc37aded0d0d86d6b0b380d50a54233ba834c96ce28a405585f78c3f98cc1e3e4c58e81c4daa9736516b3f7db7e568e1d128ee1aa151a287a3a6f717b4a6f12e7f1f51c2bdcb2f2c4c2e694ac9d91a530e14fce236017d6f83958459aee88efb72464012d89ac041fd2862d47d394b12d077cd3adce3e8f9ada0da65f0a69beb1e43eef864656931d317d8b67cc932f47d8122bde75d1f6602556ce518e44ce6c6379bb178188eb9e0301b199a0e76a403b88e018c118e3f3a29684c20367d868703f7b569365d97c3f922abe4b7db45d597274b23998ba2b459eb4ce8051ba5ede12aaa4511368b80849fd1e5c4dda06676ba66b2da671871e2bc078f671b137ef86a6f98e77f2837ea965fb83e704138261282bea221aaee1ecfeaf53fddfafd6b51810a732efc1231a607db4223a1cc961934e79d97168bf81c2ce972511a3f3122353fef5eb7894dc51ff851c3340290c06e1aab6040d8db874f7407fcce4a7e3bb11f3f9156c8b2efcdf1002b84b5eaf0f7a3e6d93f9605c69966bd4ed5908f447bb251a9a888b2eafa97598d9d001fb7454d08ad0141b6dfd7771948381d8104a12f649479ecc80f5645235bf1cc94f63c911b3bfde69373017325e78992be408e8472c90b64f8c44b89e012ade91224223b8957d771a7006b18e45471eda4315cd16495dabc15563335ae0418cebf5a2deb2e61d7d960fe78e6cd3cd8bddad4113a1cccae59346cc26ca46c6523b2ac523a181ea6cdd86eeb79c2fe5fdbc9da86893e29fb58005815135027b4910954c14f9a60aee04d2844cdb87018b8780f5bf4f9ba365ae2e6110ed2ece644d947ff9a0116a0a17a784d2529128f6baf7dce7ca08211f359b092a39742a50214eb1d3b6094174e54f18899103f77dc9d063ea13a1d2babd6827d7fcf9f1ffe7eaae5cc54d94d4e7fc99ea188880dbc51e174117c34f92faa01a8b1926c574d1a633aa3acd3180f7121bd3fd31fce370da7cfd6515c38254868f13bbe37b8015ff81d726d6b76ac3f5eb4f125cc30f1d80a8887a4ba2aee4a5e7c344bd8d2f20f6219b9f0cb972f29fb6f178294ca4f6a71d2457ae74107f57999865d7240904bdb6123c85b06d7c2808df9e92af3681a68158998b0e2a0ef8353a35508d3f60215fd1f15e1dd54444d411b2ff51596bcb39ad38625e0337f1e0d08ab58d78e73dec1365c122b1917ea75792ae66adeaf49dfe61a2a4d8a37d9308c956a4ab67d323c719e4a712fc343a5d1819240115395f590695ca749f45ccdcabdb10b0ef5d1eedb3951a923c7026cefd1e9de5120b4e9d52b0c629a149ec2f064bc8a9d7dc0fb2071bd0dd4b6fa75afae60b7d688cb827935039ccafe3e12bd6a58d4b828054ab5af91f33eebe2ceae8993c74745dbaa6e1c16f3289739f50e7fc2cd4fa91e589134a6fbe1ce21d6967d83f653f7", @typed={0x8, 0x64, 0x0, 0x0, @pid=r0}]}]}, 0x4644}, 0x1, 0x0, 0x0, 0x40001}, 0x80) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:47:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:07 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xb, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x38100, 0x0) write$binfmt_elf64(r2, 0x0, 0x1a) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) io_uring_enter(r3, 0x5477, 0xf580, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) 05:47:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:07 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:47:07 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x30}}, 0x0) 05:47:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:07 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8283, 0x0) 05:47:07 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r4, 0x0, r6) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x9) 05:47:21 executing program 4: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000005a00)={0x4644, 0x2b, 0x729, 0x70bd2a, 0x25dfdbfb, {0xe}, [@generic="ed52517cf52be46ffd76e0dd4fcd1cf8548860298707c54d2fb4029efbc44c7c68a5e8d1c493342f5173382ddf1939d641c1608d7c3fb23d3bee7a57280ef842937574098756451edcf0598e8331e62e8700e06ac191a7d8d8e44b932df2c3632a043565166c338f53914c5a82fdf4e34b7812f120dba9d27193ce52b67fac311439216d6a31bb1090060c5a28c8a49c6901f829fd6fad2361d0acf44e5e3590113f53cb7c9ef50cff5f9830e8a53cc363919dd97128538212ecbcb52af14db59f50f8382e23db17", @nested={0x4c, 0x59, 0x0, 0x1, [@typed={0xa, 0x78, 0x0, 0x0, @str='--}}}\x00'}, @generic="75067bf4426f1c32a61580d9f51c6f72fd5c97a7377db3a404528805ae30fb493f650ea598bf9dce8214bc0495609eacac6f341bb9401505b79be687", @generic]}, @nested={0x23a, 0x5b, 0x0, 0x1, [@typed={0xa2, 0x8c, 0x0, 0x0, @binary="f3ab7782ef1f47c4d5f0ea9fc8345dff4131f805da458316b1628519de020b6b5f85da561ae590091d8b0184f705c0f726f92353f38af545149004bb7b9a99a37188d956f6f93524496615e590f0173cf4713829853bd56a841e51c6e89670ab8c09d9113edbb72eb8981f4feaebccaedc1261c4ec02f4283a1b4c3d9ca383b16685489d0cf25363cbc1a506e20e4c51f1bc86d823fde23472be66a685d2"}, @generic="9d4da99145f12ba8ff48696473f236da7e978c7f1f311e2fd5c62ed5a6e276d36803d4d010b631543e5166792982fcbf14b141ab6f06157c544ab99c173d6c32aaf526e863f6ee4cce3e6281ff5d51ff2f3b3b89ec1016c448590b5e6be71d8ee710", @generic="da4219d62e", @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@mcast1}, @generic="f4baca7f624c8514618dc4a8e23909e32ee012d34045d8f92485a18b1ca7e761e6aa4cc7a8fc5eec48298e24d05c77eee7bec9f485ec0ecbe1fd00e96bb6d14abc137e41d4de1264dd62e08722fac189c3767f523b254696dd02780669143956e5b643ee59", @generic="a66c58bddbe714b275a92b1a1e9f3364b761b736703eb595454d895195d408f12a44ad42dfd67cfd04cb2c5933872cfbb1fadb00d30baa047812b5263f3b212afce02c3fa192d3038ba0572681c9bbaa58db39ab8941ed31786895ba296c86f9d37551cb2ce53df788fa0c1abc3ebd6d2d3ea15d68e4328b1939535f7ef1088b320b68a7f8ee55ec2c8dbdb40c6b061db0b76cc06740e6ad5e472fac0178e64adcd448b1b1907f4be0ec", @typed={0x5, 0x95, 0x0, 0x0, @str='\x00'}]}, @typed={0x5, 0x5f, 0x0, 0x0, @str='\x00'}, @nested={0x10d4, 0x34, 0x0, 0x1, [@typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @generic="c37a634bb8c51df34ce5fa6be6dfcb34b30efa8ae0b140d5ce07b6c89be46f33ce5081467e5ea14310c1d17db63ec65b86bfe53b688db458d91e7699d80ab92cdd4405fa6a63bfaa736d0355f017813fb0d48268b02fee1e6f947868244b1e0815b45097f77f4d451ad2ec9998f9a9ea6ce50f819002292ee60c25b3", @generic="3ddee8e052c9398ad09673ec7cca089824a8617db3050e76aa89ed0753b5a90a8d70eda29f417fb79e6b43488c171990c9ffc02571861377ebf9cae076ffde61d2fe1a9c2381ba1ce7628f77"]}, @nested={0x10f7, 0x67, 0x0, 0x1, [@generic="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", @generic="c546c615ebe579f1df7d62c95f5a190b759fde57c9a705d1bb", @generic="0c85fa0226384bdb2507ee0ed2c2076aa7dcf7287c78c847b4644b22f5c87526f81330b083095f0cc5d9934bfed1cfd3c16ecfaf6eb12119ed3a3d30b59b9c3b1bc105f8e2f9d47a3137c80e13947c35f270196d0b13a3206e5b501e8f7f68ba7a77713e8b82bd91182046047aa084997fd2843872d587d9982f6b974600730836f889ecc13688cae5b7b3d18f9f9bb5f510e145fede4241ea046143b6b3f6849b93f025ba4a22aafad34f5afc9f326ca648418722e38a8d3c4e7efdba0b227bbe5c56c523f43dc078d955749cc311d627539674696bbab6c4c7"]}, @typed={0x1004, 0x4b, 0x0, 0x0, @binary="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"}, @nested={0xf2, 0x1f, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@mcast2}, @generic="f3339ec26567c54cf0d2d79cd122b89ea590a03afc40b3eb5149fbd1d2f77622a96550bdb7d646ca220e5778f7cfed8e0381fbca8718de4387c9046394b91abf3632d9374edb853dfe69a6dd48830365208a9571a98f5e56c3b750bb49c6ced7c20f978a990da51f8b422e5ff17fc5e758b2909076f5c802e48e5f7de0baae48424a06e80ba8c67184262a482605127798587affa3f4ad974d857cacaca2f2d6fa68001d7da9ec975538a0db5ea672aa8fafe5289bdd4084454004c4fa9f522f6ab58ee4a1d6be9e53ef97aee06602244b3614aeee5a75206e26"]}, @nested={0x1014, 0xc, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32}, @generic="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", @typed={0x8, 0x64, 0x0, 0x0, @pid=r0}]}]}, 0x4644}, 0x1, 0x0, 0x0, 0x40001}, 0x80) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:47:21 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:47:21 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r4, 0x0, r6) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x9) 05:47:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:21 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:47:21 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:21 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0xda1, 0x9, 0x81b9}) write$binfmt_elf64(r1, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:47:21 executing program 5: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:21 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_complete(0x0) open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r4, 0x0, r6) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x26c, 0x9) 05:47:21 executing program 3: r0 = semget(0x3, 0x0, 0x400) r1 = semget$private(0x0, 0x2, 0x0) semctl$GETPID(r1, 0x2, 0xb, 0x0) semctl$GETNCNT(r1, 0xf5763a26e179cc69, 0xe, &(0x7f0000000040)=""/220) semop(r0, &(0x7f0000000000)=[{0x1, 0x74e, 0x800}, {0xce859f89b6fc7e05, 0x3ff, 0x1000}, {0x4, 0xffe1, 0x1000}, {0x3, 0x3f}, {0x1, 0x229}, {0x2, 0x4, 0x1000}], 0x6) r2 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) semctl$IPC_RMID(r0, 0x0, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={0x0}, &(0x7f0000001300)=0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001340)=0x0) clone3(&(0x7f00000013c0)={0x10098000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x38}, &(0x7f0000000200)=""/4096, 0x1000, &(0x7f0000001280)=""/34, &(0x7f0000001380)=[r2, r6, r7, r2], 0x4, {r3}}, 0x58) splice(r3, 0x0, r5, 0x0, 0x26c, 0x0) 05:47:21 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5401000013000100008000000000df252a3f7f0300004e230000000000080000090000000000000080000000040000000900000000000010", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) 05:47:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:21 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r3, 0x0, r5) pipe(&(0x7f00000014c0)) 05:47:35 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:47:35 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r3, 0x0, r5) 05:47:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:35 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x2010, r3, 0x0) 05:47:35 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000000)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x26c, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2003001, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@version_L}, {@mmap}, {@access_client}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x4}}], [{@dont_hash}, {@permit_directio}]}}) 05:47:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:35 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:35 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x12) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x9, 0x7, 0x5}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x26c, 0x0) 05:47:48 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) 05:47:48 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:48 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:47:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:48 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000000)="bf73a6e66b3f6d8aa58f33776e74e252dd4ad501092d18cca8d3355f569607adcbdab523cae67f48f445839edb443aafb8dcd81a12fdbecf08567a8a6931cad9ac96948971b77cf8dd57ae08a8fbccac4b237a8e890d303d21af143da87c74f0fa282a15d8991838", 0x68, 0x80}, 0x0) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:47:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:47:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:47:48 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x59, 0xfc, 0x5, 0x4, 0x8001, 0x3, 0x6, 0x7c4c49e7, 0x48, 0x40, 0x1, 0x80, 0x0, 0x38, 0x1, 0xfff, 0x8, 0xff}, [{0x4, 0x0, 0xd9ca, 0x2, 0x2, 0x3ff, 0x3, 0x8001}], "513ed64f98e3770899376f1258c1d14bf35459f60df8f95821cecd6d04a245cf44fcb56e72ec4d47eb41d47695753a1a751bbc35ac680d6a12982a4dc3360cdcee39b777d9901a582ca135489d8cf8ac85aa9f38245f086db9d1ccee605de8c2d27bf55c28f151aa04a4fff953b21a5f8aecda794a9edb85c43e06f82a", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f5) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r0, 0x0, r3, 0x0, 0x26c, 0x8) 05:47:48 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) 05:47:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:48:01 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:01 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:01 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="bab3a71197a0e9502079676243b5e103b729602f024cb9a9f4965e7fb0bcf4069153bbf79b216efc74a269f39e67a0b59ac9c54f3e2f1afff83031392398366f5660ff9ed49fdca48b2dca46d2291410908006842ba70250805700fe6b55233249d947606674f2ae3c99ea2c19fdf1467a1af7e4c2278ad0d7dad766de20cc6b7655d4f228f906a4668099", 0x8b) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) fcntl$dupfd(r5, 0x406, r3) 05:48:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:01 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) 05:48:01 executing program 2: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000000)="bf73a6e66b3f6d8aa58f33776e74e252dd4ad501092d18cca8d3355f569607adcbdab523cae67f48f445839edb443aafb8dcd81a12fdbecf08567a8a6931cad9ac96948971b77cf8dd57ae08a8fbccac4b237a8e890d303d21af143da87c74f0fa282a15d8991838", 0x68, 0x80}, 0x0) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:48:01 executing program 3: pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$incfs(r0, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x4, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) splice(r1, 0x0, r3, 0x0, 0x4000000000000000, 0x0) 05:48:01 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:48:01 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)) 05:48:01 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x3, 0x0, 0x11, 0x81, 0x10, "629b679ee9cc269cada1241566a23415"}, 0x19, 0x3) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r3, &(0x7f0000000000)=0x6c87aae1, r4, &(0x7f0000000040)=0x1d66, 0x5, 0xa) 05:48:01 executing program 2: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000000)="bf73a6e66b3f6d8aa58f33776e74e252dd4ad501092d18cca8d3355f569607adcbdab523cae67f48f445839edb443aafb8dcd81a12fdbecf08567a8a6931cad9ac96948971b77cf8dd57ae08a8fbccac4b237a8e890d303d21af143da87c74f0fa282a15d8991838", 0x68, 0x80}, 0x0) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:48:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:02 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) 05:48:02 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) socketpair(0x22, 0x80006, 0xbb1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r4, &(0x7f0000000040)=0x2, 0x6) 05:48:15 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:15 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:15 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r2 = openat$cgroup_pressure(r0, &(0x7f0000000280)='io.pressure\x00', 0x2, 0x0) r3 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="33c6725983c1ba539e6b1b4f", 0xc, 0xdd}], 0x20a0000, &(0x7f0000000180)={[], [{@fsname={'fsname', 0x3d, '.ads\x00'/15}}, {@smackfsdef}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@appraise_type}, {@smackfshat}, {@dont_hash}, {@obj_role}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '#:}.\'.--.-!+%'}}, {@appraise_type}]}) openat$incfs(r3, &(0x7f0000000240)='.pending_reads\x00', 0x200, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1b) pipe(&(0x7f00000014c0)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40800, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000300)={{r2}, 0x1b5e2880, 0x3, 0x6}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r5, 0x0, &(0x7f0000001500)="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", 0x1000, 0x12161, 0x1, {0x0, r6}}, 0x7f) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) 05:48:15 executing program 2: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r0, 0x0, &(0x7f0000000000)="bf73a6e66b3f6d8aa58f33776e74e252dd4ad501092d18cca8d3355f569607adcbdab523cae67f48f445839edb443aafb8dcd81a12fdbecf08567a8a6931cad9ac96948971b77cf8dd57ae08a8fbccac4b237a8e890d303d21af143da87c74f0fa282a15d8991838", 0x68, 0x80}, 0x0) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:48:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:15 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:15 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_device', 0xd0401, 0x63) ptrace$pokeuser(0x6, 0x0, 0x2, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) clone3(&(0x7f0000001300)={0xa001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/106, 0x6a, &(0x7f00000001c0)=""/4096, &(0x7f00000012c0)=[0x0, 0x0, r4, r0, r0, 0x0], 0x6, {r2}}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r3, 0x10000000) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001480), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd0480, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) close(r6) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) 05:48:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:15 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:15 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:15 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x3f) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x26c, 0x0) 05:48:15 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 5: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000000)='setgroups\x00') openat$cgroup_freezer_state(r4, &(0x7f0000000040), 0x2, 0x0) 05:48:29 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:29 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000002700)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_device', 0xd0401, 0x63) ptrace$pokeuser(0x6, 0x0, 0x2, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) clone3(&(0x7f0000001300)={0xa001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/106, 0x6a, &(0x7f00000001c0)=""/4096, &(0x7f00000012c0)=[0x0, 0x0, r4, r0, r0, 0x0], 0x6, {r2}}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r3, 0x10000000) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001480), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd0480, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) close(r6) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) 05:48:29 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:29 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0xfffffffffffffc01, 0x0) 05:48:29 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000000c0)=0x6) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:29 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r3, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:29 executing program 5: ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000040)={0x40, 0x7, 0x4}) r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r3, &(0x7f0000000000)={[0x4]}, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() ptrace(0x10, r5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fork() ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x2, 0x4) fcntl$setown(r4, 0x8, r5) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r7, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) kcmp(r0, r5, 0x3, r7, r1) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r8, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) splice(r1, 0x0, r8, 0x0, 0x226c, 0xd) 05:48:29 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_device', 0xd0401, 0x63) ptrace$pokeuser(0x6, 0x0, 0x2, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) clone3(&(0x7f0000001300)={0xa001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/106, 0x6a, &(0x7f00000001c0)=""/4096, &(0x7f00000012c0)=[0x0, 0x0, r4, r0, r0, 0x0], 0x6, {r2}}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r3, 0x10000000) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001480), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd0480, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) close(r6) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) 05:48:43 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:43 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:43 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 3: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/ata_device', 0xd0401, 0x63) ptrace$pokeuser(0x6, 0x0, 0x2, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r4 = gettid() process_vm_readv(r4, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7c}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x5, 0x0) clone3(&(0x7f0000001300)={0xa001000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xa}, &(0x7f0000000140)=""/106, 0x6a, &(0x7f00000001c0)=""/4096, &(0x7f00000012c0)=[0x0, 0x0, r4, r0, r0, 0x0], 0x6, {r2}}, 0x58) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x110, r3, 0x10000000) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000001480), 0xffffffffffffffff) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0xd0480, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r6, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) close(r6) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) 05:48:43 executing program 5: clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000100)={0x4, 0x7, 0x2, 0x9, 0x2, [{0xbf0f, 0x1, 0x2, '\x00', 0x4}, {0x1f, 0x4, 0x6, '\x00', 0x1}]}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x28, 0x1c}}, './file0\x00'}) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x26c, 0x0) 05:48:43 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:48:43 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) pipe(&(0x7f0000002700)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) 05:48:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:43 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_complete(0x0) open_tree(r1, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) write$binfmt_elf64(r0, 0x0, 0x26c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:43 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:43 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) r0 = syz_io_uring_complete(0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1000) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x170, 0x4}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:58 executing program 3: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:48:58 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x26c, 0x0) 05:48:58 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:48:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:48:58 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) r0 = syz_io_uring_complete(0x0) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 05:48:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:58 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) syz_io_uring_complete(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:58 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:58 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) openat(r3, &(0x7f0000000040)='./file0\x00', 0x802, 0x104) 05:48:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:48:58 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:48:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:12 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r1, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1a000, &(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c61636365737363666e792c657569643de7fa87e972793ba62720d5f2fbb298711e0ffd8430c436a4964b716baf8ce0114e810cb213150853c4536c321e890c8e6187d30fe60d081d02f9fed55e08ec5adbe70ee94f3350afe2ba72be9e4fd85b4ce5fe02c14cd3da9356565ef919980880f37254600001ec9380617dc95a795b8c9056cf296bbf7d22898d766a47f8cbe086a185c3e2747163a94f2205b80587402d23d0ccc32cf296276adbc3d0f81761", @ANYRESDEC, @ANYRES64=r0]) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x26c, 0x0) 05:49:12 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:12 executing program 6: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:12 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:49:12 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:12 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) r5 = signalfd4(r4, &(0x7f0000000000)={[0x1]}, 0x8, 0x80800) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000040)=0x9) 05:49:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:12 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) mq_open(&(0x7f0000000000)='w)\x00', 0x1840, 0x34, &(0x7f0000000040)={0x80000001, 0x80000000, 0xb6a6, 0x80000000}) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0b010300bc0300005e000000f92a0b874c0200000200000000000000000000003ff8812c55300bc66031852866935ff9530f3c0efbb4ced96164a8f443054394da78ef0fbe1508da5f2cf401ae0b886691e4bb316edc6e985cd369932bacd3efb151d87fc1a27fb68c5bb91f91fbfb676fad79ad33719b8d29ba2ecd9df00d9752cb42006c719339ad598ce0087128641ec1ccabbe623c66692ce89d6e76b4fbca0bd2ffdb351ffe84fdc74bc7654f789fe3168694de821c28097d102300000000000000000000000000000000004cc1000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff00"/1469], 0x5bd) 05:49:12 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:27 executing program 2: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20e000, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x2, 0x2) fcntl$setown(r4, 0x8, r5) r6 = fcntl$getown(0xffffffffffffffff, 0x9) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x35}, &(0x7f0000000140)=""/59, 0x3b, &(0x7f0000000180)=""/197, &(0x7f0000000280)=[r0, r5, r6, r0, r0], 0x5, {r3}}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)) splice(r1, 0x0, r7, 0x0, 0x26c, 0x0) 05:49:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:27 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r5, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) mmap$usbmon(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x11, 0xffffffffffffffff, 0x7) splice(r0, 0x0, r3, 0x0, 0x26c, 0x6) 05:49:27 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:27 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:27 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:27 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:27 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x438, 0x3f3, 0x100, 0x70bd2d, 0x25dfdbfc, {0x3, 0x1, 0x17, [0x1e, 0x6, 0x9, 0x2, 0x2b4caefa, 0x8001, 0xea8, 0x7f, 0x7ff, 0x0, 0x9, 0x7acb, 0xfff, 0x6, 0x4, 0x8000, 0x8, 0x9, 0x1, 0x3, 0x800, 0x1000, 0x56b, 0x7ff, 0x5, 0x0, 0xbb45, 0xeb2, 0xfff, 0x8, 0x2, 0x8001, 0x800, 0x8, 0xffffffa1, 0xffff, 0x3f, 0x9, 0x3e7e, 0x0, 0x1fe9, 0x1, 0x1ff, 0x9, 0x5, 0x101, 0x1f, 0x1ff, 0x137c8f76, 0x9, 0x77a8d0a2, 0xfc5, 0x7, 0x8000, 0x6249, 0x9650, 0xa6, 0xff, 0xf38, 0x8, 0x1ff, 0xfffffff8, 0x1f, 0x51], [0x0, 0x28000000, 0x9, 0x4, 0x5, 0xff, 0xbd7, 0x40, 0x5, 0x6, 0x5056, 0x1, 0x100, 0x3, 0xfffffe01, 0x5, 0x8, 0xffff, 0xffffffe0, 0x7, 0x0, 0x1, 0x5, 0x61b, 0x81, 0xff, 0xfffffffa, 0x8, 0x1, 0xe066, 0x6, 0x7, 0xc9, 0x6, 0x51, 0x1, 0x7f, 0x1, 0x7, 0xc4b, 0xfffffff8, 0xffff, 0x0, 0xffffffff, 0xffffffff, 0x9, 0x8, 0x8, 0x269, 0x7, 0x8001, 0x8, 0x0, 0x4, 0x3ea, 0x1, 0x0, 0x9, 0x80000000, 0x8, 0x6, 0x200, 0x101, 0x1], [0x100, 0xfffffffe, 0x2, 0x7, 0x9, 0x8, 0x7, 0x7f, 0x0, 0x6, 0xfff, 0x9, 0xffffffff, 0x8, 0x14000, 0x80, 0x6, 0x1, 0x36, 0x5, 0x8, 0xffffff00, 0xcaf, 0xf22c, 0x5, 0x40, 0x1, 0xf0ab, 0x400, 0x0, 0x0, 0x7f, 0x6, 0x4, 0x5b, 0x7, 0x400, 0x1, 0x2, 0x80000001, 0x2, 0xfff, 0x1, 0xff, 0xc6, 0x6, 0x5, 0x0, 0x81, 0x3, 0x7, 0x5, 0x8, 0x1, 0xfffffff7, 0x1, 0x1, 0xbbd6, 0x80, 0x1, 0x2, 0x9f, 0x79df7907, 0xec], [0x2, 0x15a, 0xffff7e19, 0x2, 0xfffffcf8, 0x60, 0x2, 0x80000000, 0x5, 0x10000, 0x400, 0x100, 0x3, 0x7, 0xff, 0x2da5, 0x1, 0x4, 0x7, 0x9, 0x1000000, 0x10001, 0x0, 0xfffffffb, 0x7fffffff, 0x8, 0xffffffff, 0x0, 0x4, 0x0, 0x40, 0x3240, 0x1, 0xffffffff, 0x8, 0x1, 0x3f, 0x4, 0x3f, 0x6, 0xf9b, 0x6e8e, 0x8b9, 0x7fffffff, 0x6, 0x37d, 0x9, 0x7, 0x0, 0x3000, 0xffff, 0x7, 0x7, 0x7fff, 0x3b, 0x7, 0x80000001, 0x3, 0x4, 0x3, 0xc17, 0xd0, 0x8001, 0x7], 0x17, ['\x00', ')+.\x00', '\x00', '\\,\x00', '!a@*\x00', '\x00', '$@\\-$],\x00']}, ["", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x40000}, 0x810) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x26c, 0x0) 05:49:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:28 executing program 2: r0 = clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, 0x0, 0x26c) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20e000, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x2, 0x2) fcntl$setown(r4, 0x8, r5) r6 = fcntl$getown(0xffffffffffffffff, 0x9) clone3(&(0x7f00000002c0)={0x10000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x35}, &(0x7f0000000140)=""/59, 0x3b, &(0x7f0000000180)=""/197, &(0x7f0000000280)=[r0, r5, r6, r0, r0], 0x5, {r3}}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)) splice(r1, 0x0, r7, 0x0, 0x26c, 0x0) 05:49:28 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:28 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x26c, 0x8) r3 = open_tree(r2, &(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f00000000c0)={{r0}, "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"}) openat(r3, &(0x7f0000000080)='./file0\x00', 0x0, 0xa) 05:49:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:28 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) 05:49:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:41 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:49:41 executing program 5: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, 0x0, 0x26c) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000000)) splice(r0, 0x0, r2, 0x0, 0x26c, 0x0) 05:49:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:41 executing program 2: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pidfd_getfd(r3, r1, 0x0) write$binfmt_elf64(r2, 0x0, 0x26c) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x29, @rand_addr=0x64010102, 0x4e23, 0x1, 'nq\x00', 0x0, 0x401, 0x21}, 0x2c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) syz_io_uring_setup(0x6aee, &(0x7f0000000040)={0x0, 0x9f35, 0x20, 0x3, 0xd7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) 05:49:41 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:41 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, 0x0, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:41 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:49:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1617.324961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 05:49:41 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:41 executing program 6: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:49:41 executing program 2: clone3(&(0x7f0000001200)={0x88318d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r3, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) pidfd_getfd(r3, r1, 0x0) write$binfmt_elf64(r2, 0x0, 0x26c) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x29, @rand_addr=0x64010102, 0x4e23, 0x1, 'nq\x00', 0x0, 0x401, 0x21}, 0x2c) pipe(&(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff}) openat$incfs(r4, &(0x7f00000030c0)='.pending_reads\x00', 0x200, 0x0) syz_io_uring_setup(0x6aee, &(0x7f0000000040)={0x0, 0x9f35, 0x20, 0x3, 0xd7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x26c, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) [ 1617.406517] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 05:49:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:41 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x2000c0c1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 05:49:41 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 05:49:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1617.467541] syz-executor.7 (22346) used greatest stack depth: 23152 bytes left 05:49:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:42 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x2000c0c1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r3) 05:49:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:42 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 05:49:42 executing program 5: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001b40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000f8dbdf25950048a2000006009500c40a000006009500d00000000600950004000000060095000100000006009500810000000600950004080000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x44811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/244, 0xf4}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1b480aa58731915}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="eb00", @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf2557000000060095000101000006009500f2bc0000"], 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x0) lseek(r0, 0x27b, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x0, 0x101]}) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x1c384, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="fe", 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYRESHEX=r1], 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0xc) fadvise64(r1, 0x1, 0x1, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001900)={0x53, 0xfffffffffffffffc, 0x3, 0xfa, @scatter={0x4, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000480)=""/19, 0x13}]}, &(0x7f00000015c0)="49b9cb", &(0x7f0000001840)=""/121, 0xfffff001, 0x4, 0xffffffffffffffff, &(0x7f00000018c0)}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x123001, 0x0) fallocate(r1, 0x14, 0xfffffffffffffffa, 0x7) io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0}]) 05:49:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:55 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:55 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 1) 05:49:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) (fail_nth: 1) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:55 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x2000c0c1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r3) 05:49:55 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:49:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 05:49:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:49:55 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1631.084792] FAULT_INJECTION: forcing a failure. [ 1631.084792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1631.086331] CPU: 0 PID: 22505 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1631.087229] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.088296] Call Trace: [ 1631.088658] dump_stack+0x107/0x167 [ 1631.089139] should_fail.cold+0x5/0xa [ 1631.089637] _copy_from_user+0x2e/0x1b0 [ 1631.090156] __copy_msghdr_from_user+0x91/0x4b0 [ 1631.090769] ? __ia32_sys_shutdown+0x80/0x80 [ 1631.090969] FAULT_INJECTION: forcing a failure. [ 1631.090969] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.091322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1631.091337] ? __lock_acquire+0x1657/0x5b00 [ 1631.091353] ? __lock_acquire+0xbb1/0x5b00 [ 1631.091374] sendmsg_copy_msghdr+0xa1/0x160 [ 1631.091387] ? do_recvmmsg+0x6d0/0x6d0 [ 1631.095509] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1631.096149] ? lock_downgrade+0x6d0/0x6d0 [ 1631.096671] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1631.097322] ___sys_sendmsg+0xc6/0x170 [ 1631.097798] ? sendmsg_copy_msghdr+0x160/0x160 [ 1631.098361] ? __fget_files+0x2cf/0x520 [ 1631.098856] ? lock_downgrade+0x6d0/0x6d0 [ 1631.099397] ? find_held_lock+0x2c/0x110 [ 1631.099900] ? __fget_files+0x2f8/0x520 [ 1631.100393] ? __fget_light+0xea/0x290 [ 1631.100889] __sys_sendmsg+0xe5/0x1b0 [ 1631.101356] ? __sys_sendmsg_sock+0x40/0x40 [ 1631.101882] ? rcu_read_lock_any_held+0x75/0xa0 [ 1631.102452] ? fput_many+0x2f/0x1a0 [ 1631.102897] ? ksys_write+0x1a9/0x260 [ 1631.103364] ? __ia32_sys_read+0xb0/0xb0 [ 1631.103862] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.104505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.105149] ? trace_hardirqs_on+0x5b/0x180 [ 1631.105677] do_syscall_64+0x33/0x40 [ 1631.106133] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.106755] RIP: 0033:0x7f28019e8b19 [ 1631.107212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.109457] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1631.110384] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1631.111251] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1631.112123] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.113016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.113884] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 [ 1631.114772] CPU: 1 PID: 22501 Comm: syz-executor.5 Not tainted 5.10.228 #1 [ 1631.115657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.116736] Call Trace: [ 1631.117082] dump_stack+0x107/0x167 [ 1631.117550] should_fail.cold+0x5/0xa [ 1631.118048] should_failslab+0x5/0x20 [ 1631.118546] kmem_cache_alloc_bulk+0x4b/0x320 [ 1631.119133] io_submit_sqes+0x6fe6/0x8610 [ 1631.119674] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1631.120310] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1631.120944] ? find_held_lock+0x2c/0x110 [ 1631.121465] ? io_submit_sqes+0x8610/0x8610 [ 1631.122011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1631.122636] ? wait_for_completion_io+0x270/0x270 [ 1631.123253] ? rcu_read_lock_any_held+0x75/0xa0 [ 1631.123856] ? vfs_write+0x354/0xb10 [ 1631.124344] ? fput_many+0x2f/0x1a0 [ 1631.124838] ? ksys_write+0x1a9/0x260 [ 1631.125334] ? __ia32_sys_read+0xb0/0xb0 [ 1631.125859] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.126545] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.127223] do_syscall_64+0x33/0x40 [ 1631.127722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.128375] RIP: 0033:0x7fd595920b19 [ 1631.128875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.131274] RSP: 002b:00007fd592e96188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1631.132266] RAX: ffffffffffffffda RBX: 00007fd595a33f60 RCX: 00007fd595920b19 [ 1631.133209] RDX: 0000000000009196 RSI: 000000000000038a RDI: 0000000000000004 [ 1631.134132] RBP: 00007fd592e961d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.135056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.135984] R13: 00007ffda9cefc9f R14: 00007fd592e96300 R15: 0000000000022000 05:49:55 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3f, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) [ 1644.895755] FAULT_INJECTION: forcing a failure. [ 1644.895755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.897286] CPU: 0 PID: 22633 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1644.898127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.899141] Call Trace: [ 1644.899468] dump_stack+0x107/0x167 [ 1644.899924] should_fail.cold+0x5/0xa [ 1644.900396] _copy_from_user+0x2e/0x1b0 [ 1644.900546] FAULT_INJECTION: forcing a failure. [ 1644.900546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.900892] __copy_msghdr_from_user+0x91/0x4b0 [ 1644.902890] ? __ia32_sys_shutdown+0x80/0x80 [ 1644.903425] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.904055] ? __lock_acquire+0x1657/0x5b00 [ 1644.904579] ? __lock_acquire+0xbb1/0x5b00 [ 1644.905106] sendmsg_copy_msghdr+0xa1/0x160 [ 1644.905629] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.906103] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.906738] ? lock_downgrade+0x6d0/0x6d0 [ 1644.907243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.907880] ___sys_sendmsg+0xc6/0x170 [ 1644.908352] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.908910] ? __fget_files+0x2cf/0x520 [ 1644.909401] ? lock_downgrade+0x6d0/0x6d0 [ 1644.909906] ? find_held_lock+0x2c/0x110 [ 1644.910404] ? __fget_files+0x2f8/0x520 [ 1644.910891] ? __fget_light+0xea/0x290 [ 1644.911369] __sys_sendmsg+0xe5/0x1b0 [ 1644.911831] ? __sys_sendmsg_sock+0x40/0x40 [ 1644.912354] ? rcu_read_lock_any_held+0x75/0xa0 [ 1644.912919] ? fput_many+0x2f/0x1a0 [ 1644.913372] ? ksys_write+0x1a9/0x260 [ 1644.913836] ? __ia32_sys_read+0xb0/0xb0 [ 1644.914331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.914964] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.915585] ? trace_hardirqs_on+0x5b/0x180 [ 1644.916112] do_syscall_64+0x33/0x40 [ 1644.916562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.917221] RIP: 0033:0x7f0a68868b19 [ 1644.917676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.919908] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.920832] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1644.921705] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1644.922581] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1644.923446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.924309] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1644.929236] CPU: 1 PID: 22631 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1644.930090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.931098] Call Trace: [ 1644.931424] dump_stack+0x107/0x167 [ 1644.931867] should_fail.cold+0x5/0xa [ 1644.932335] _copy_from_user+0x2e/0x1b0 [ 1644.932822] __copy_msghdr_from_user+0x91/0x4b0 [ 1644.933402] ? __ia32_sys_shutdown+0x80/0x80 [ 1644.933937] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.934570] ? __lock_acquire+0x1657/0x5b00 [ 1644.935096] ? __lock_acquire+0xbb1/0x5b00 [ 1644.935613] sendmsg_copy_msghdr+0xa1/0x160 [ 1644.936136] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.936610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.937261] ? lock_downgrade+0x6d0/0x6d0 [ 1644.937765] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.938405] ___sys_sendmsg+0xc6/0x170 [ 1644.938887] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.939445] ? __fget_files+0x2cf/0x520 [ 1644.939926] ? lock_downgrade+0x6d0/0x6d0 [ 1644.940430] ? find_held_lock+0x2c/0x110 [ 1644.940928] ? __fget_files+0x2f8/0x520 [ 1644.941422] ? __fget_light+0xea/0x290 [ 1644.941899] __sys_sendmsg+0xe5/0x1b0 [ 1644.942361] ? __sys_sendmsg_sock+0x40/0x40 [ 1644.942883] ? rcu_read_lock_any_held+0x75/0xa0 [ 1644.943447] ? fput_many+0x2f/0x1a0 [ 1644.943890] ? ksys_write+0x1a9/0x260 [ 1644.944353] ? __ia32_sys_read+0xb0/0xb0 [ 1644.944847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1644.945496] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1644.946118] ? trace_hardirqs_on+0x5b/0x180 [ 1644.946642] do_syscall_64+0x33/0x40 [ 1644.947094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1644.947714] RIP: 0033:0x7f9ec6407b19 [ 1644.948165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1644.950398] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1644.951319] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1644.952181] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1644.953050] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 05:50:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 1) 05:50:09 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:50:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 1) 05:50:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:50:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x80, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) [ 1644.953913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.961274] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 05:50:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 2) 05:50:09 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1644.986634] FAULT_INJECTION: forcing a failure. [ 1644.986634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.988138] CPU: 1 PID: 22640 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1644.988972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1644.990001] Call Trace: [ 1644.990324] dump_stack+0x107/0x167 [ 1644.990767] should_fail.cold+0x5/0xa [ 1644.991237] _copy_from_user+0x2e/0x1b0 [ 1644.991725] iovec_from_user+0x141/0x400 [ 1644.992222] __import_iovec+0x67/0x590 [ 1644.992698] ? __ia32_sys_shutdown+0x80/0x80 [ 1644.993257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.993906] import_iovec+0x83/0xb0 [ 1644.994353] sendmsg_copy_msghdr+0x131/0x160 [ 1644.994891] ? do_recvmmsg+0x6d0/0x6d0 [ 1644.995369] ? lock_downgrade+0x6d0/0x6d0 [ 1644.995880] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1644.996522] ___sys_sendmsg+0xc6/0x170 [ 1644.997004] ? sendmsg_copy_msghdr+0x160/0x160 [ 1644.997633] ? __fget_files+0x2cf/0x520 [ 1644.998118] ? lock_downgrade+0x6d0/0x6d0 [ 1644.998626] ? find_held_lock+0x2c/0x110 [ 1644.999126] ? __fget_files+0x2f8/0x520 [ 1644.999616] ? __fget_light+0xea/0x290 [ 1645.000100] __sys_sendmsg+0xe5/0x1b0 [ 1645.000564] ? __sys_sendmsg_sock+0x40/0x40 [ 1645.001130] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.001742] ? fput_many+0x2f/0x1a0 [ 1645.002192] ? ksys_write+0x1a9/0x260 [ 1645.002668] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.003317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.003954] ? trace_hardirqs_on+0x5b/0x180 [ 1645.004487] do_syscall_64+0x33/0x40 [ 1645.004947] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.005594] RIP: 0033:0x7f28019e8b19 [ 1645.006053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.008319] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.009268] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1645.010138] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1645.011013] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.011889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.012763] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 [ 1645.068625] FAULT_INJECTION: forcing a failure. [ 1645.068625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.070123] CPU: 1 PID: 22647 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1645.070956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.071963] Call Trace: [ 1645.072289] dump_stack+0x107/0x167 [ 1645.072730] should_fail.cold+0x5/0xa [ 1645.073230] _copy_from_user+0x2e/0x1b0 [ 1645.073724] iovec_from_user+0x141/0x400 [ 1645.074228] __import_iovec+0x67/0x590 [ 1645.074704] ? __ia32_sys_shutdown+0x80/0x80 [ 1645.075251] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1645.075893] import_iovec+0x83/0xb0 [ 1645.076344] sendmsg_copy_msghdr+0x131/0x160 [ 1645.076884] ? do_recvmmsg+0x6d0/0x6d0 [ 1645.077404] ? lock_downgrade+0x6d0/0x6d0 [ 1645.077913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1645.078558] ___sys_sendmsg+0xc6/0x170 [ 1645.079040] ? sendmsg_copy_msghdr+0x160/0x160 [ 1645.079606] ? __fget_files+0x2cf/0x520 [ 1645.080090] ? lock_downgrade+0x6d0/0x6d0 [ 1645.080600] ? find_held_lock+0x2c/0x110 [ 1645.081128] ? __fget_files+0x2f8/0x520 [ 1645.081625] ? __fget_light+0xea/0x290 [ 1645.082107] __sys_sendmsg+0xe5/0x1b0 [ 1645.082574] ? __sys_sendmsg_sock+0x40/0x40 [ 1645.083100] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.083666] ? fput_many+0x2f/0x1a0 [ 1645.084110] ? ksys_write+0x1a9/0x260 [ 1645.084576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.085293] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.085923] ? trace_hardirqs_on+0x5b/0x180 [ 1645.086460] do_syscall_64+0x33/0x40 [ 1645.086914] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.087539] RIP: 0033:0x7f0a68868b19 [ 1645.087996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.090271] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.091201] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1645.092073] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1645.092946] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.093829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.094701] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1645.127311] FAULT_INJECTION: forcing a failure. [ 1645.127311] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.129748] FAULT_INJECTION: forcing a failure. [ 1645.129748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.129772] CPU: 0 PID: 22654 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1645.129780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.129785] Call Trace: [ 1645.129804] dump_stack+0x107/0x167 [ 1645.129819] should_fail.cold+0x5/0xa [ 1645.129840] _copy_from_user+0x2e/0x1b0 [ 1645.129856] iovec_from_user+0x141/0x400 [ 1645.129875] __import_iovec+0x67/0x590 [ 1645.129891] ? __ia32_sys_shutdown+0x80/0x80 [ 1645.129907] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1645.129927] import_iovec+0x83/0xb0 [ 1645.129947] sendmsg_copy_msghdr+0x131/0x160 [ 1645.129961] ? do_recvmmsg+0x6d0/0x6d0 [ 1645.129978] ? lock_downgrade+0x6d0/0x6d0 [ 1645.129995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1645.130014] ___sys_sendmsg+0xc6/0x170 [ 1645.130031] ? sendmsg_copy_msghdr+0x160/0x160 [ 1645.130050] ? __fget_files+0x2cf/0x520 [ 1645.130064] ? lock_downgrade+0x6d0/0x6d0 [ 1645.130079] ? find_held_lock+0x2c/0x110 [ 1645.130102] ? __fget_files+0x2f8/0x520 [ 1645.130123] ? __fget_light+0xea/0x290 [ 1645.130144] __sys_sendmsg+0xe5/0x1b0 [ 1645.130159] ? __sys_sendmsg_sock+0x40/0x40 [ 1645.130173] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.130189] ? fput_many+0x2f/0x1a0 [ 1645.130205] ? ksys_write+0x1a9/0x260 [ 1645.130225] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.130241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.130253] ? trace_hardirqs_on+0x5b/0x180 [ 1645.130268] do_syscall_64+0x33/0x40 [ 1645.130283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.130292] RIP: 0033:0x7f9ec6407b19 [ 1645.130306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.130314] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.130330] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1645.130338] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1645.130346] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.130354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.130363] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 [ 1645.157253] CPU: 1 PID: 22643 Comm: syz-executor.5 Not tainted 5.10.228 #1 [ 1645.158097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1645.159107] Call Trace: [ 1645.159433] dump_stack+0x107/0x167 [ 1645.159878] should_fail.cold+0x5/0xa [ 1645.160345] ? create_object.isra.0+0x3a/0xa20 [ 1645.160909] should_failslab+0x5/0x20 [ 1645.161420] kmem_cache_alloc+0x5b/0x310 [ 1645.161920] create_object.isra.0+0x3a/0xa20 [ 1645.162452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1645.163075] kmem_cache_alloc_bulk+0x168/0x320 [ 1645.163644] io_submit_sqes+0x6fe6/0x8610 [ 1645.164166] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1645.164772] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1645.165411] ? find_held_lock+0x2c/0x110 [ 1645.165913] ? io_submit_sqes+0x8610/0x8610 [ 1645.166448] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1645.167041] ? wait_for_completion_io+0x270/0x270 [ 1645.167636] ? rcu_read_lock_any_held+0x75/0xa0 [ 1645.168203] ? vfs_write+0x354/0xb10 [ 1645.168657] ? fput_many+0x2f/0x1a0 [ 1645.169110] ? ksys_write+0x1a9/0x260 [ 1645.169576] ? __ia32_sys_read+0xb0/0xb0 [ 1645.170074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1645.170714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1645.171343] do_syscall_64+0x33/0x40 [ 1645.171801] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1645.172426] RIP: 0033:0x7fd595920b19 [ 1645.172882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1645.175146] RSP: 002b:00007fd592e96188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1645.176073] RAX: ffffffffffffffda RBX: 00007fd595a33f60 RCX: 00007fd595920b19 [ 1645.176945] RDX: 0000000000009196 RSI: 000000000000038a RDI: 0000000000000004 [ 1645.177833] RBP: 00007fd592e961d0 R08: 0000000000000000 R09: 0000000000000000 [ 1645.178699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.179575] R13: 00007ffda9cefc9f R14: 00007fd592e96300 R15: 0000000000022000 05:50:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 2) 05:50:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:09 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) (fail_nth: 2) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:09 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 2) 05:50:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:50:22 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:50:22 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) (fail_nth: 3) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1658.366999] FAULT_INJECTION: forcing a failure. [ 1658.366999] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.370648] CPU: 1 PID: 22773 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1658.371024] FAULT_INJECTION: forcing a failure. [ 1658.371024] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.372875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.372881] Call Trace: [ 1658.372898] dump_stack+0x107/0x167 [ 1658.372915] should_fail.cold+0x5/0xa [ 1658.381182] ? __alloc_skb+0x6d/0x5b0 [ 1658.381883] should_failslab+0x5/0x20 [ 1658.382408] kmem_cache_alloc_node+0x55/0x330 [ 1658.383028] ? lock_downgrade+0x6d0/0x6d0 [ 1658.383605] __alloc_skb+0x6d/0x5b0 [ 1658.384172] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.384893] netlink_sendmsg+0x998/0xdf0 [ 1658.385539] ? netlink_unicast+0x7f0/0x7f0 [ 1658.386824] ? netlink_unicast+0x7f0/0x7f0 [ 1658.387969] __sock_sendmsg+0x154/0x190 [ 1658.389085] ____sys_sendmsg+0x70d/0x870 [ 1658.389834] ? sock_write_iter+0x3d0/0x3d0 [ 1658.390449] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.391005] ? lock_downgrade+0x6d0/0x6d0 [ 1658.391521] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.392208] ___sys_sendmsg+0xf3/0x170 [ 1658.392692] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.393298] ? __fget_files+0x2cf/0x520 [ 1658.394313] ? lock_downgrade+0x6d0/0x6d0 [ 1658.395399] ? find_held_lock+0x2c/0x110 [ 1658.396444] ? __fget_files+0x2f8/0x520 [ 1658.397514] ? __fget_light+0xea/0x290 [ 1658.398041] __sys_sendmsg+0xe5/0x1b0 [ 1658.398506] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.399104] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.399679] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.400363] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.401040] ? trace_hardirqs_on+0x5b/0x180 [ 1658.401644] do_syscall_64+0x33/0x40 [ 1658.402182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.402923] RIP: 0033:0x7f9ec6407b19 [ 1658.403457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.406173] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.408861] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1658.409876] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.410792] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.411657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.412596] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 [ 1658.413594] CPU: 0 PID: 22775 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1658.414455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.415456] Call Trace: [ 1658.415784] dump_stack+0x107/0x167 [ 1658.416227] should_fail.cold+0x5/0xa [ 1658.416691] ? __alloc_skb+0x6d/0x5b0 [ 1658.417157] should_failslab+0x5/0x20 [ 1658.417650] kmem_cache_alloc_node+0x55/0x330 [ 1658.418246] ? lock_downgrade+0x6d0/0x6d0 [ 1658.418804] __alloc_skb+0x6d/0x5b0 [ 1658.419292] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.420026] netlink_sendmsg+0x998/0xdf0 [ 1658.420573] ? netlink_unicast+0x7f0/0x7f0 [ 1658.421139] ? netlink_unicast+0x7f0/0x7f0 [ 1658.421716] __sock_sendmsg+0x154/0x190 [ 1658.422247] ____sys_sendmsg+0x70d/0x870 [ 1658.422791] ? sock_write_iter+0x3d0/0x3d0 [ 1658.423355] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.423879] ? lock_downgrade+0x6d0/0x6d0 [ 1658.424453] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.425165] ___sys_sendmsg+0xf3/0x170 [ 1658.425700] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.426330] ? __fget_files+0x2cf/0x520 [ 1658.426876] ? lock_downgrade+0x6d0/0x6d0 [ 1658.427453] ? find_held_lock+0x2c/0x110 [ 1658.428012] ? __fget_files+0x2f8/0x520 [ 1658.428578] ? __fget_light+0xea/0x290 [ 1658.429110] __sys_sendmsg+0xe5/0x1b0 [ 1658.429633] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.430159] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.430732] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.431368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.431995] ? trace_hardirqs_on+0x5b/0x180 [ 1658.432525] do_syscall_64+0x33/0x40 [ 1658.432976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.433617] RIP: 0033:0x7f0a68868b19 [ 1658.434067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.436296] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.437218] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1658.438092] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.438961] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.439831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.440700] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1658.452756] FAULT_INJECTION: forcing a failure. 05:50:22 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) 05:50:22 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 3) 05:50:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 3) 05:50:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 05:50:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 3) [ 1658.452756] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.455390] CPU: 1 PID: 22779 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1658.457581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.460192] Call Trace: [ 1658.461052] dump_stack+0x107/0x167 [ 1658.462188] should_fail.cold+0x5/0xa [ 1658.463369] ? __alloc_skb+0x6d/0x5b0 [ 1658.464555] should_failslab+0x5/0x20 [ 1658.465817] kmem_cache_alloc_node+0x55/0x330 [ 1658.467201] ? lock_downgrade+0x6d0/0x6d0 [ 1658.468477] __alloc_skb+0x6d/0x5b0 [ 1658.469644] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.471378] netlink_sendmsg+0x998/0xdf0 [ 1658.472632] ? netlink_unicast+0x7f0/0x7f0 [ 1658.474049] ? netlink_unicast+0x7f0/0x7f0 [ 1658.475336] __sock_sendmsg+0x154/0x190 [ 1658.476563] ____sys_sendmsg+0x70d/0x870 [ 1658.477908] ? sock_write_iter+0x3d0/0x3d0 [ 1658.479209] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.480414] ? lock_downgrade+0x6d0/0x6d0 [ 1658.482450] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.484256] ___sys_sendmsg+0xf3/0x170 [ 1658.485566] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.487121] ? __fget_files+0x2cf/0x520 [ 1658.488403] ? lock_downgrade+0x6d0/0x6d0 [ 1658.489836] ? find_held_lock+0x2c/0x110 [ 1658.491266] ? __fget_files+0x2f8/0x520 [ 1658.492544] ? __fget_light+0xea/0x290 [ 1658.493898] __sys_sendmsg+0xe5/0x1b0 [ 1658.495072] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.496413] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.497872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.499180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.500489] ? trace_hardirqs_on+0x5b/0x180 [ 1658.501567] do_syscall_64+0x33/0x40 [ 1658.502093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.502767] RIP: 0033:0x7f28019e8b19 [ 1658.503227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.505917] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.508246] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1658.512224] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.514407] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.516261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.518294] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 [ 1658.526964] FAULT_INJECTION: forcing a failure. [ 1658.526964] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.530094] CPU: 1 PID: 22767 Comm: syz-executor.5 Not tainted 5.10.228 #1 [ 1658.531013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.532074] Call Trace: [ 1658.532404] dump_stack+0x107/0x167 [ 1658.532927] should_fail.cold+0x5/0xa [ 1658.533401] ? create_object.isra.0+0x3a/0xa20 [ 1658.534855] should_failslab+0x5/0x20 [ 1658.535812] kmem_cache_alloc+0x5b/0x310 [ 1658.536860] create_object.isra.0+0x3a/0xa20 [ 1658.537972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.539242] kmem_cache_alloc_bulk+0x168/0x320 [ 1658.540408] io_submit_sqes+0x6fe6/0x8610 [ 1658.541512] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1658.542859] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1658.544090] ? find_held_lock+0x2c/0x110 [ 1658.545131] ? io_submit_sqes+0x8610/0x8610 [ 1658.546330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1658.547565] ? wait_for_completion_io+0x270/0x270 [ 1658.548843] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.550184] ? vfs_write+0x354/0xb10 [ 1658.550704] ? fput_many+0x2f/0x1a0 [ 1658.551478] ? ksys_write+0x1a9/0x260 [ 1658.552580] ? __ia32_sys_read+0xb0/0xb0 [ 1658.553258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.554005] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.554631] do_syscall_64+0x33/0x40 [ 1658.555138] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.555811] RIP: 0033:0x7fd595920b19 [ 1658.556263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.558875] RSP: 002b:00007fd592e96188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1658.560038] RAX: ffffffffffffffda RBX: 00007fd595a33f60 RCX: 00007fd595920b19 [ 1658.563019] RDX: 0000000000009196 RSI: 000000000000038a RDI: 0000000000000004 [ 1658.564251] RBP: 00007fd592e961d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.565469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.566460] R13: 00007ffda9cefc9f R14: 00007fd592e96300 R15: 0000000000022000 05:50:23 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 4) [ 1658.590026] FAULT_INJECTION: forcing a failure. [ 1658.590026] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.591517] CPU: 0 PID: 22786 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1658.592354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.593356] Call Trace: [ 1658.593706] dump_stack+0x107/0x167 [ 1658.594148] should_fail.cold+0x5/0xa [ 1658.594614] ? create_object.isra.0+0x3a/0xa20 [ 1658.595173] should_failslab+0x5/0x20 [ 1658.595642] kmem_cache_alloc+0x5b/0x310 [ 1658.596137] ? find_held_lock+0x2c/0x110 [ 1658.596640] create_object.isra.0+0x3a/0xa20 [ 1658.597173] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.597823] kmem_cache_alloc_node+0x169/0x330 [ 1658.598378] ? lock_downgrade+0x6d0/0x6d0 [ 1658.598888] __alloc_skb+0x6d/0x5b0 [ 1658.599337] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.600008] netlink_sendmsg+0x998/0xdf0 [ 1658.600507] ? netlink_unicast+0x7f0/0x7f0 [ 1658.601027] ? netlink_unicast+0x7f0/0x7f0 [ 1658.601566] __sock_sendmsg+0x154/0x190 [ 1658.602051] ____sys_sendmsg+0x70d/0x870 [ 1658.602546] ? sock_write_iter+0x3d0/0x3d0 [ 1658.603063] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.603547] ? lock_downgrade+0x6d0/0x6d0 [ 1658.604053] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.604694] ___sys_sendmsg+0xf3/0x170 [ 1658.605183] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.605758] ? __fget_files+0x2cf/0x520 [ 1658.606243] ? lock_downgrade+0x6d0/0x6d0 [ 1658.606747] ? find_held_lock+0x2c/0x110 [ 1658.607256] ? __fget_files+0x2f8/0x520 [ 1658.607746] ? __fget_light+0xea/0x290 [ 1658.608231] __sys_sendmsg+0xe5/0x1b0 [ 1658.608694] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.609224] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.609829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.610470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.611096] ? trace_hardirqs_on+0x5b/0x180 [ 1658.611628] do_syscall_64+0x33/0x40 [ 1658.612081] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.612701] RIP: 0033:0x7f0a68868b19 [ 1658.613155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.615768] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.616870] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1658.617847] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.618716] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.619593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.620460] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:50:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 05:50:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 4) 05:50:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1658.673906] FAULT_INJECTION: forcing a failure. [ 1658.673906] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.675342] CPU: 0 PID: 22796 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1658.676189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.677200] Call Trace: [ 1658.677534] dump_stack+0x107/0x167 [ 1658.677979] should_fail.cold+0x5/0xa [ 1658.678456] ? create_object.isra.0+0x3a/0xa20 [ 1658.679014] should_failslab+0x5/0x20 [ 1658.679479] kmem_cache_alloc+0x5b/0x310 [ 1658.679974] ? find_held_lock+0x2c/0x110 [ 1658.680473] create_object.isra.0+0x3a/0xa20 [ 1658.681013] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.681666] kmem_cache_alloc_node+0x169/0x330 [ 1658.682222] ? lock_downgrade+0x6d0/0x6d0 [ 1658.682728] __alloc_skb+0x6d/0x5b0 [ 1658.683171] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.683841] netlink_sendmsg+0x998/0xdf0 [ 1658.684335] ? netlink_unicast+0x7f0/0x7f0 [ 1658.684854] ? netlink_unicast+0x7f0/0x7f0 [ 1658.685367] __sock_sendmsg+0x154/0x190 [ 1658.685875] ____sys_sendmsg+0x70d/0x870 [ 1658.686391] ? sock_write_iter+0x3d0/0x3d0 [ 1658.686984] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.687527] ? lock_downgrade+0x6d0/0x6d0 [ 1658.688052] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.688698] ___sys_sendmsg+0xf3/0x170 [ 1658.689180] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.689753] ? __fget_files+0x2cf/0x520 [ 1658.690241] ? lock_downgrade+0x6d0/0x6d0 [ 1658.690750] ? find_held_lock+0x2c/0x110 [ 1658.691255] ? __fget_files+0x2f8/0x520 [ 1658.691746] ? __fget_light+0xea/0x290 [ 1658.692233] __sys_sendmsg+0xe5/0x1b0 [ 1658.693396] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.694418] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.695540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.697046] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.698432] ? trace_hardirqs_on+0x5b/0x180 [ 1658.699495] do_syscall_64+0x33/0x40 [ 1658.700412] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.701703] RIP: 0033:0x7f9ec6407b19 [ 1658.702616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.706332] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.707262] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1658.708131] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.708998] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.709883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.710754] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 05:50:23 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ba, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 5) [ 1658.786198] FAULT_INJECTION: forcing a failure. [ 1658.786198] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.787818] CPU: 1 PID: 22904 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1658.788658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.789803] Call Trace: [ 1658.790132] dump_stack+0x107/0x167 [ 1658.790664] should_fail.cold+0x5/0xa [ 1658.791265] should_failslab+0x5/0x20 [ 1658.791781] __kmalloc_node_track_caller+0x74/0x3b0 [ 1658.792394] ? netlink_sendmsg+0x998/0xdf0 [ 1658.792964] ? lock_downgrade+0x6d0/0x6d0 [ 1658.793778] __alloc_skb+0xb1/0x5b0 [ 1658.794225] netlink_sendmsg+0x998/0xdf0 [ 1658.794786] ? netlink_unicast+0x7f0/0x7f0 [ 1658.795313] ? netlink_unicast+0x7f0/0x7f0 [ 1658.795877] __sock_sendmsg+0x154/0x190 [ 1658.796360] ____sys_sendmsg+0x70d/0x870 [ 1658.796904] ? sock_write_iter+0x3d0/0x3d0 05:50:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 4) [ 1658.797415] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.798003] ? lock_downgrade+0x6d0/0x6d0 [ 1658.798525] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.799221] ___sys_sendmsg+0xf3/0x170 [ 1658.799698] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.800339] ? __fget_files+0x2cf/0x520 [ 1658.800874] ? lock_downgrade+0x6d0/0x6d0 [ 1658.801391] ? find_held_lock+0x2c/0x110 [ 1658.805989] ? __fget_files+0x2f8/0x520 [ 1658.806483] ? __fget_light+0xea/0x290 [ 1658.807011] __sys_sendmsg+0xe5/0x1b0 [ 1658.807476] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.808050] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.808632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.809340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.810035] ? trace_hardirqs_on+0x5b/0x180 [ 1658.810579] do_syscall_64+0x33/0x40 [ 1658.811094] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.811764] RIP: 0033:0x7f0a68868b19 [ 1658.812243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.812489] FAULT_INJECTION: forcing a failure. [ 1658.812489] name failslab, interval 1, probability 0, space 0, times 0 [ 1658.814612] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.814626] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1658.814633] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.814639] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.814653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.822237] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1658.823181] CPU: 0 PID: 22909 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1658.824026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1658.825048] Call Trace: [ 1658.825382] dump_stack+0x107/0x167 [ 1658.825836] should_fail.cold+0x5/0xa [ 1658.826305] ? create_object.isra.0+0x3a/0xa20 [ 1658.826872] should_failslab+0x5/0x20 [ 1658.827345] kmem_cache_alloc+0x5b/0x310 [ 1658.827844] ? find_held_lock+0x2c/0x110 [ 1658.828341] create_object.isra.0+0x3a/0xa20 [ 1658.828876] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1658.833529] kmem_cache_alloc_node+0x169/0x330 [ 1658.834096] __alloc_skb+0x6d/0x5b0 [ 1658.834543] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1658.835210] netlink_sendmsg+0x998/0xdf0 [ 1658.835704] ? netlink_unicast+0x7f0/0x7f0 [ 1658.836227] ? netlink_unicast+0x7f0/0x7f0 [ 1658.836743] __sock_sendmsg+0x154/0x190 [ 1658.837226] ____sys_sendmsg+0x70d/0x870 [ 1658.837741] ? sock_write_iter+0x3d0/0x3d0 [ 1658.838253] ? do_recvmmsg+0x6d0/0x6d0 [ 1658.838730] ? lock_downgrade+0x6d0/0x6d0 [ 1658.839248] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1658.839891] ___sys_sendmsg+0xf3/0x170 [ 1658.840365] ? sendmsg_copy_msghdr+0x160/0x160 [ 1658.840923] ? __fget_files+0x2cf/0x520 [ 1658.841406] ? lock_downgrade+0x6d0/0x6d0 [ 1658.841926] ? find_held_lock+0x2c/0x110 [ 1658.842425] ? __fget_files+0x2f8/0x520 [ 1658.842911] ? __fget_light+0xea/0x290 [ 1658.843387] __sys_sendmsg+0xe5/0x1b0 [ 1658.843850] ? __sys_sendmsg_sock+0x40/0x40 [ 1658.844374] ? rcu_read_lock_any_held+0x75/0xa0 [ 1658.844948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1658.845628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1658.846260] ? trace_hardirqs_on+0x5b/0x180 [ 1658.846786] do_syscall_64+0x33/0x40 [ 1658.847239] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1658.847862] RIP: 0033:0x7f28019e8b19 [ 1658.848320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1658.850576] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1658.851518] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1658.852385] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1658.853253] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1658.854130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1658.854999] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 05:50:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:50:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 05:50:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 6) 05:50:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:50:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 5) 05:50:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 5) 05:50:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x106, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:50:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1672.704880] FAULT_INJECTION: forcing a failure. [ 1672.704880] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.708141] CPU: 0 PID: 23035 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1672.710078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1672.712392] Call Trace: 05:50:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) [ 1672.713105] dump_stack+0x107/0x167 [ 1672.722260] should_fail.cold+0x5/0xa [ 1672.723305] ? create_object.isra.0+0x3a/0xa20 [ 1672.724562] should_failslab+0x5/0x20 [ 1672.725600] kmem_cache_alloc+0x5b/0x310 [ 1672.726737] create_object.isra.0+0x3a/0xa20 [ 1672.727941] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1672.729335] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1672.730770] ? netlink_sendmsg+0x998/0xdf0 [ 1672.731929] ? lock_downgrade+0x6d0/0x6d0 [ 1672.733067] __alloc_skb+0xb1/0x5b0 [ 1672.733988] netlink_sendmsg+0x998/0xdf0 [ 1672.734465] ? netlink_unicast+0x7f0/0x7f0 [ 1672.734966] ? netlink_unicast+0x7f0/0x7f0 [ 1672.735459] __sock_sendmsg+0x154/0x190 [ 1672.735922] ____sys_sendmsg+0x70d/0x870 [ 1672.736393] ? sock_write_iter+0x3d0/0x3d0 [ 1672.736882] ? do_recvmmsg+0x6d0/0x6d0 [ 1672.737336] ? lock_downgrade+0x6d0/0x6d0 [ 1672.737819] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1672.739199] ___sys_sendmsg+0xf3/0x170 [ 1672.740262] ? sendmsg_copy_msghdr+0x160/0x160 [ 1672.741515] ? __fget_files+0x2cf/0x520 [ 1672.742617] ? lock_downgrade+0x6d0/0x6d0 [ 1672.743749] ? find_held_lock+0x2c/0x110 [ 1672.744864] ? __fget_files+0x2f8/0x520 [ 1672.745989] ? __fget_light+0xea/0x290 [ 1672.747062] __sys_sendmsg+0xe5/0x1b0 [ 1672.748100] ? __sys_sendmsg_sock+0x40/0x40 [ 1672.749280] ? rcu_read_lock_any_held+0x75/0xa0 [ 1672.750201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1672.750808] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1672.751405] ? trace_hardirqs_on+0x5b/0x180 [ 1672.751904] do_syscall_64+0x33/0x40 [ 1672.752336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1672.752929] RIP: 0033:0x7f0a68868b19 [ 1672.753362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.757818] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.759945] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1672.761950] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1672.763935] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.765933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.767958] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1672.788918] FAULT_INJECTION: forcing a failure. [ 1672.788918] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.790549] CPU: 1 PID: 23073 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1672.791211] FAULT_INJECTION: forcing a failure. [ 1672.791211] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.791423] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1672.793717] Call Trace: [ 1672.794076] dump_stack+0x107/0x167 [ 1672.794541] should_fail.cold+0x5/0xa [ 1672.795030] should_failslab+0x5/0x20 [ 1672.795516] __kmalloc_node_track_caller+0x74/0x3b0 [ 1672.796144] ? netlink_sendmsg+0x998/0xdf0 [ 1672.796679] ? lock_downgrade+0x6d0/0x6d0 [ 1672.797209] __alloc_skb+0xb1/0x5b0 [ 1672.797674] netlink_sendmsg+0x998/0xdf0 [ 1672.798213] ? netlink_unicast+0x7f0/0x7f0 [ 1672.798755] ? netlink_unicast+0x7f0/0x7f0 [ 1672.799294] __sock_sendmsg+0x154/0x190 [ 1672.799796] ____sys_sendmsg+0x70d/0x870 [ 1672.800314] ? sock_write_iter+0x3d0/0x3d0 [ 1672.800846] ? do_recvmmsg+0x6d0/0x6d0 [ 1672.801344] ? lock_downgrade+0x6d0/0x6d0 [ 1672.801885] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1672.802598] ___sys_sendmsg+0xf3/0x170 [ 1672.803097] ? sendmsg_copy_msghdr+0x160/0x160 [ 1672.803679] ? __fget_files+0x2cf/0x520 [ 1672.804183] ? lock_downgrade+0x6d0/0x6d0 [ 1672.804708] ? find_held_lock+0x2c/0x110 [ 1672.805230] ? __fget_files+0x2f8/0x520 [ 1672.805738] ? __fget_light+0xea/0x290 [ 1672.806279] __sys_sendmsg+0xe5/0x1b0 [ 1672.806767] ? __sys_sendmsg_sock+0x40/0x40 [ 1672.807313] ? rcu_read_lock_any_held+0x75/0xa0 [ 1672.807912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1672.808575] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1672.809224] ? trace_hardirqs_on+0x5b/0x180 [ 1672.809769] do_syscall_64+0x33/0x40 [ 1672.810286] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1672.810938] RIP: 0033:0x7f28019e8b19 [ 1672.811410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.813705] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.814733] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1672.815637] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1672.816530] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.817422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.818363] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 [ 1672.819278] CPU: 0 PID: 23071 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1672.820089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1672.821044] Call Trace: [ 1672.821348] dump_stack+0x107/0x167 [ 1672.821769] should_fail.cold+0x5/0xa [ 1672.822247] should_failslab+0x5/0x20 [ 1672.822691] __kmalloc_node_track_caller+0x74/0x3b0 [ 1672.823264] ? netlink_sendmsg+0x998/0xdf0 [ 1672.823750] ? lock_downgrade+0x6d0/0x6d0 [ 1672.824236] __alloc_skb+0xb1/0x5b0 [ 1672.824661] netlink_sendmsg+0x998/0xdf0 [ 1672.825134] ? netlink_unicast+0x7f0/0x7f0 [ 1672.825625] ? netlink_unicast+0x7f0/0x7f0 [ 1672.826142] __sock_sendmsg+0x154/0x190 [ 1672.826600] ____sys_sendmsg+0x70d/0x870 [ 1672.827066] ? sock_write_iter+0x3d0/0x3d0 [ 1672.827556] ? do_recvmmsg+0x6d0/0x6d0 [ 1672.828005] ? lock_downgrade+0x6d0/0x6d0 [ 1672.828483] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1672.829086] ___sys_sendmsg+0xf3/0x170 [ 1672.829535] ? sendmsg_copy_msghdr+0x160/0x160 [ 1672.830095] ? __fget_files+0x2cf/0x520 [ 1672.830559] ? lock_downgrade+0x6d0/0x6d0 [ 1672.831038] ? find_held_lock+0x2c/0x110 [ 1672.831515] ? __fget_files+0x2f8/0x520 [ 1672.831976] ? __fget_light+0xea/0x290 [ 1672.832435] __sys_sendmsg+0xe5/0x1b0 [ 1672.832873] ? __sys_sendmsg_sock+0x40/0x40 [ 1672.833366] ? rcu_read_lock_any_held+0x75/0xa0 05:50:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) [ 1672.833918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1672.834560] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1672.835152] ? trace_hardirqs_on+0x5b/0x180 [ 1672.842206] do_syscall_64+0x33/0x40 [ 1672.842638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1672.843228] RIP: 0033:0x7f9ec6407b19 [ 1672.843658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1672.845770] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.846661] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1672.847479] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1672.848303] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1672.849120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1672.849950] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 05:50:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:50:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 6) 05:50:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1672.982994] FAULT_INJECTION: forcing a failure. [ 1672.982994] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.984460] CPU: 0 PID: 23156 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1672.985256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1672.986252] Call Trace: [ 1672.986596] dump_stack+0x107/0x167 [ 1672.987020] should_fail.cold+0x5/0xa [ 1672.987464] ? create_object.isra.0+0x3a/0xa20 [ 1672.988002] should_failslab+0x5/0x20 [ 1672.988449] kmem_cache_alloc+0x5b/0x310 [ 1672.988922] create_object.isra.0+0x3a/0xa20 [ 1672.989429] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1672.990036] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1672.990629] ? netlink_sendmsg+0x998/0xdf0 [ 1672.991132] __alloc_skb+0xb1/0x5b0 [ 1672.991562] netlink_sendmsg+0x998/0xdf0 [ 1672.992036] ? netlink_unicast+0x7f0/0x7f0 [ 1672.992533] ? netlink_unicast+0x7f0/0x7f0 [ 1672.993025] __sock_sendmsg+0x154/0x190 [ 1672.993493] ____sys_sendmsg+0x70d/0x870 [ 1672.993980] ? sock_write_iter+0x3d0/0x3d0 [ 1672.994467] ? do_recvmmsg+0x6d0/0x6d0 [ 1672.994924] ? lock_downgrade+0x6d0/0x6d0 [ 1672.995412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1672.996022] ___sys_sendmsg+0xf3/0x170 [ 1672.996482] ? sendmsg_copy_msghdr+0x160/0x160 [ 1672.997015] ? __fget_files+0x2cf/0x520 [ 1672.997475] ? lock_downgrade+0x6d0/0x6d0 [ 1672.997971] ? find_held_lock+0x2c/0x110 [ 1672.998453] ? __fget_files+0x2f8/0x520 [ 1672.998919] ? __fget_light+0xea/0x290 [ 1672.999379] __sys_sendmsg+0xe5/0x1b0 [ 1672.999825] ? __sys_sendmsg_sock+0x40/0x40 [ 1673.000327] ? rcu_read_lock_any_held+0x75/0xa0 [ 1673.000876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1673.001485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1673.006112] ? trace_hardirqs_on+0x5b/0x180 [ 1673.006609] do_syscall_64+0x33/0x40 [ 1673.007038] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.007628] RIP: 0033:0x7f28019e8b19 [ 1673.008055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.010205] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.011084] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1673.011911] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1673.012746] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.013567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.014402] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 05:50:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x6, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x2af) 05:50:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 7) 05:50:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 6) [ 1673.088606] FAULT_INJECTION: forcing a failure. [ 1673.088606] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.090228] CPU: 0 PID: 23168 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1673.091210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.092381] Call Trace: [ 1673.092751] dump_stack+0x107/0x167 [ 1673.093259] should_fail.cold+0x5/0xa [ 1673.093798] ? create_object.isra.0+0x3a/0xa20 [ 1673.094423] should_failslab+0x5/0x20 [ 1673.094966] kmem_cache_alloc+0x5b/0x310 [ 1673.095549] create_object.isra.0+0x3a/0xa20 [ 1673.096167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1673.096884] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1673.097598] ? netlink_sendmsg+0x998/0xdf0 [ 1673.098149] ? lock_downgrade+0x6d0/0x6d0 [ 1673.098631] __alloc_skb+0xb1/0x5b0 [ 1673.099054] netlink_sendmsg+0x998/0xdf0 [ 1673.099527] ? netlink_unicast+0x7f0/0x7f0 [ 1673.100023] ? netlink_unicast+0x7f0/0x7f0 [ 1673.100518] __sock_sendmsg+0x154/0x190 [ 1673.100978] ____sys_sendmsg+0x70d/0x870 [ 1673.101453] ? sock_write_iter+0x3d0/0x3d0 [ 1673.101962] ? do_recvmmsg+0x6d0/0x6d0 [ 1673.102416] ? lock_downgrade+0x6d0/0x6d0 [ 1673.102895] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1673.103506] ___sys_sendmsg+0xf3/0x170 [ 1673.103956] ? sendmsg_copy_msghdr+0x160/0x160 [ 1673.104485] ? __fget_files+0x2cf/0x520 [ 1673.104945] ? lock_downgrade+0x6d0/0x6d0 [ 1673.105425] ? find_held_lock+0x2c/0x110 [ 1673.105911] ? __fget_files+0x2f8/0x520 [ 1673.106380] ? __fget_light+0xea/0x290 [ 1673.106838] __sys_sendmsg+0xe5/0x1b0 [ 1673.107277] ? __sys_sendmsg_sock+0x40/0x40 [ 1673.107774] ? rcu_read_lock_any_held+0x75/0xa0 [ 1673.108321] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1673.108924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1673.109527] ? trace_hardirqs_on+0x5b/0x180 [ 1673.110053] do_syscall_64+0x33/0x40 [ 1673.110498] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.111092] RIP: 0033:0x7f9ec6407b19 [ 1673.111522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.113653] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.114561] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1673.114941] FAULT_INJECTION: forcing a failure. [ 1673.114941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.115386] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1673.115394] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.115400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.115414] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 [ 1673.120210] CPU: 1 PID: 23170 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1673.121086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.122144] Call Trace: [ 1673.122484] dump_stack+0x107/0x167 [ 1673.122942] should_fail.cold+0x5/0xa [ 1673.123432] _copy_from_iter_full+0x201/0xa60 [ 1673.124003] ? __virt_addr_valid+0x170/0x5d0 [ 1673.124566] ? __check_object_size+0x319/0x440 [ 1673.125151] netlink_sendmsg+0x879/0xdf0 [ 1673.125669] ? netlink_unicast+0x7f0/0x7f0 [ 1673.126230] ? netlink_unicast+0x7f0/0x7f0 [ 1673.126767] __sock_sendmsg+0x154/0x190 [ 1673.127272] ____sys_sendmsg+0x70d/0x870 [ 1673.127785] ? sock_write_iter+0x3d0/0x3d0 [ 1673.128318] ? do_recvmmsg+0x6d0/0x6d0 [ 1673.128817] ? lock_downgrade+0x6d0/0x6d0 [ 1673.129347] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1673.130030] ___sys_sendmsg+0xf3/0x170 [ 1673.130527] ? sendmsg_copy_msghdr+0x160/0x160 [ 1673.131109] ? __fget_files+0x2cf/0x520 [ 1673.131611] ? lock_downgrade+0x6d0/0x6d0 [ 1673.132134] ? find_held_lock+0x2c/0x110 [ 1673.132654] ? __fget_files+0x2f8/0x520 [ 1673.133161] ? __fget_light+0xea/0x290 [ 1673.133658] __sys_sendmsg+0xe5/0x1b0 [ 1673.134161] ? __sys_sendmsg_sock+0x40/0x40 [ 1673.134706] ? rcu_read_lock_any_held+0x75/0xa0 [ 1673.135309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1673.135973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1673.136621] ? trace_hardirqs_on+0x5b/0x180 [ 1673.137168] do_syscall_64+0x33/0x40 [ 1673.137642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.138307] RIP: 0033:0x7f0a68868b19 [ 1673.138778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.141060] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.142028] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1673.142926] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1673.143820] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.144713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.145607] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:50:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 7) 05:50:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:50:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 7) 05:50:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0xf6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:50:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 8) 05:50:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:50:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x5}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) [ 1686.119691] FAULT_INJECTION: forcing a failure. [ 1686.119691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.121171] CPU: 1 PID: 23285 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1686.122003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.123149] Call Trace: [ 1686.123480] dump_stack+0x107/0x167 [ 1686.123920] should_fail.cold+0x5/0xa [ 1686.124389] _copy_from_iter_full+0x201/0xa60 [ 1686.124935] ? __virt_addr_valid+0x170/0x5d0 [ 1686.125474] ? __check_object_size+0x319/0x440 [ 1686.126040] netlink_sendmsg+0x879/0xdf0 [ 1686.126685] ? netlink_unicast+0x7f0/0x7f0 [ 1686.127207] ? netlink_unicast+0x7f0/0x7f0 [ 1686.127721] __sock_sendmsg+0x154/0x190 [ 1686.128201] ____sys_sendmsg+0x70d/0x870 [ 1686.128693] ? sock_write_iter+0x3d0/0x3d0 [ 1686.129037] FAULT_INJECTION: forcing a failure. [ 1686.129037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.129202] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.129220] ? lock_downgrade+0x6d0/0x6d0 [ 1686.129239] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.132254] ___sys_sendmsg+0xf3/0x170 [ 1686.132725] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.133278] ? __fget_files+0x2cf/0x520 [ 1686.133763] ? lock_downgrade+0x6d0/0x6d0 [ 1686.134263] ? find_held_lock+0x2c/0x110 [ 1686.134907] ? __fget_files+0x2f8/0x520 [ 1686.135394] ? __fget_light+0xea/0x290 [ 1686.135869] __sys_sendmsg+0xe5/0x1b0 [ 1686.136330] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.136853] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.137427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.138061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.138850] ? trace_hardirqs_on+0x5b/0x180 [ 1686.139375] do_syscall_64+0x33/0x40 [ 1686.139827] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.140446] RIP: 0033:0x7f28019e8b19 [ 1686.140895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.143252] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.144172] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1686.145033] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.145898] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.146904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.147767] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 [ 1686.148652] CPU: 0 PID: 23288 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1686.149507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.150525] Call Trace: [ 1686.150852] dump_stack+0x107/0x167 [ 1686.151295] should_fail.cold+0x5/0xa [ 1686.151763] _copy_from_iter_full+0x201/0xa60 [ 1686.152321] ? __virt_addr_valid+0x170/0x5d0 [ 1686.152858] ? __check_object_size+0x319/0x440 [ 1686.153420] netlink_sendmsg+0x879/0xdf0 [ 1686.153915] ? netlink_unicast+0x7f0/0x7f0 [ 1686.154464] ? netlink_unicast+0x7f0/0x7f0 [ 1686.154977] __sock_sendmsg+0x154/0x190 [ 1686.155457] ____sys_sendmsg+0x70d/0x870 [ 1686.155949] ? sock_write_iter+0x3d0/0x3d0 [ 1686.156466] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.156943] ? lock_downgrade+0x6d0/0x6d0 [ 1686.157455] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.158101] ___sys_sendmsg+0xf3/0x170 [ 1686.158596] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.159156] ? __fget_files+0x2cf/0x520 [ 1686.159648] ? lock_downgrade+0x6d0/0x6d0 [ 1686.160150] ? find_held_lock+0x2c/0x110 [ 1686.160647] ? __fget_files+0x2f8/0x520 [ 1686.161137] ? __fget_light+0xea/0x290 [ 1686.161616] __sys_sendmsg+0xe5/0x1b0 [ 1686.162087] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.162624] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.163198] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.163838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.164465] ? trace_hardirqs_on+0x5b/0x180 [ 1686.164987] do_syscall_64+0x33/0x40 [ 1686.165448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.166066] RIP: 0033:0x7f9ec6407b19 [ 1686.166539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.168771] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.169699] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1686.170588] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.171445] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.172314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.173174] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 [ 1686.184574] FAULT_INJECTION: forcing a failure. [ 1686.184574] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.186252] CPU: 0 PID: 23290 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1686.187125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.188133] Call Trace: [ 1686.188455] dump_stack+0x107/0x167 [ 1686.188900] should_fail.cold+0x5/0xa [ 1686.189368] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.190179] should_failslab+0x5/0x20 [ 1686.190664] __kmalloc+0x72/0x390 [ 1686.191096] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.191876] genl_family_rcv_msg_doit+0xda/0x330 [ 1686.192465] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1686.193276] ? cap_capable+0x1cd/0x230 [ 1686.193760] ? security_capable+0x95/0xc0 [ 1686.194282] ? ns_capable+0xe2/0x110 [ 1686.194747] genl_rcv_msg+0x33c/0x5a0 [ 1686.195219] ? genl_get_cmd+0x480/0x480 [ 1686.195710] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1686.196326] ? lock_release+0x680/0x680 [ 1686.196809] ? netlink_deliver_tap+0xf4/0xcc0 [ 1686.197361] netlink_rcv_skb+0x14b/0x430 [ 1686.197856] ? genl_get_cmd+0x480/0x480 [ 1686.198352] ? netlink_ack+0xab0/0xab0 [ 1686.198837] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1686.199395] ? is_vmalloc_addr+0x7b/0xb0 [ 1686.199900] genl_rcv+0x24/0x40 [ 1686.200308] netlink_unicast+0x549/0x7f0 [ 1686.200810] ? netlink_attachskb+0x870/0x870 [ 1686.201353] netlink_sendmsg+0x90f/0xdf0 [ 1686.201856] ? netlink_unicast+0x7f0/0x7f0 [ 1686.202412] ? netlink_unicast+0x7f0/0x7f0 [ 1686.202936] __sock_sendmsg+0x154/0x190 [ 1686.203422] ____sys_sendmsg+0x70d/0x870 [ 1686.203921] ? sock_write_iter+0x3d0/0x3d0 [ 1686.204434] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.204909] ? lock_downgrade+0x6d0/0x6d0 [ 1686.205417] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.206074] ___sys_sendmsg+0xf3/0x170 [ 1686.206565] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.207131] ? __fget_files+0x2cf/0x520 [ 1686.207613] ? lock_downgrade+0x6d0/0x6d0 [ 1686.208120] ? find_held_lock+0x2c/0x110 [ 1686.208640] ? __fget_files+0x2f8/0x520 [ 1686.209137] ? __fget_light+0xea/0x290 [ 1686.209623] __sys_sendmsg+0xe5/0x1b0 [ 1686.210087] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.210627] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.211213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.211863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.212494] ? trace_hardirqs_on+0x5b/0x180 [ 1686.213020] do_syscall_64+0x33/0x40 [ 1686.213476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.214110] RIP: 0033:0x7f0a68868b19 [ 1686.214575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.216835] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.217767] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1686.219043] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.220773] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.222435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.223308] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:50:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}, {0x1, 0x1, 0x2, 0xff, 0x3, 0x38, 0x81, 0x80000000}], "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", ['\x00']}, 0x2af) 05:50:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 8) 05:50:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x3, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:50:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1686.345884] FAULT_INJECTION: forcing a failure. [ 1686.345884] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.347467] CPU: 1 PID: 23307 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1686.348305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.349306] Call Trace: [ 1686.349630] dump_stack+0x107/0x167 [ 1686.350073] should_fail.cold+0x5/0xa [ 1686.350684] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.351478] should_failslab+0x5/0x20 [ 1686.351939] __kmalloc+0x72/0x390 [ 1686.352366] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.353138] genl_family_rcv_msg_doit+0xda/0x330 [ 1686.353714] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1686.354690] ? cap_capable+0x1cd/0x230 [ 1686.355248] ? security_capable+0x95/0xc0 [ 1686.355837] ? ns_capable+0xe2/0x110 [ 1686.356364] genl_rcv_msg+0x33c/0x5a0 [ 1686.356898] ? genl_get_cmd+0x480/0x480 [ 1686.357463] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1686.358179] ? lock_release+0x680/0x680 [ 1686.358818] ? netlink_deliver_tap+0xf4/0xcc0 [ 1686.359365] netlink_rcv_skb+0x14b/0x430 [ 1686.359857] ? genl_get_cmd+0x480/0x480 [ 1686.360341] ? netlink_ack+0xab0/0xab0 [ 1686.360817] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1686.361373] ? is_vmalloc_addr+0x7b/0xb0 [ 1686.361866] genl_rcv+0x24/0x40 [ 1686.362267] netlink_unicast+0x549/0x7f0 [ 1686.362983] ? netlink_attachskb+0x870/0x870 [ 1686.363616] netlink_sendmsg+0x90f/0xdf0 [ 1686.364193] ? netlink_unicast+0x7f0/0x7f0 [ 1686.364800] ? netlink_unicast+0x7f0/0x7f0 [ 1686.365396] __sock_sendmsg+0x154/0x190 [ 1686.365959] ____sys_sendmsg+0x70d/0x870 [ 1686.366679] ? sock_write_iter+0x3d0/0x3d0 [ 1686.367278] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.367829] ? lock_downgrade+0x6d0/0x6d0 [ 1686.368418] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.369166] ___sys_sendmsg+0xf3/0x170 [ 1686.369714] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.370502] ? __fget_files+0x2cf/0x520 [ 1686.371076] ? lock_downgrade+0x6d0/0x6d0 [ 1686.371663] ? find_held_lock+0x2c/0x110 [ 1686.372242] ? __fget_files+0x2f8/0x520 [ 1686.372809] ? __fget_light+0xea/0x290 [ 1686.373365] __sys_sendmsg+0xe5/0x1b0 [ 1686.373901] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.374647] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.375319] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.376059] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.376781] ? trace_hardirqs_on+0x5b/0x180 [ 1686.377384] do_syscall_64+0x33/0x40 [ 1686.377910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.378765] RIP: 0033:0x7f28019e8b19 [ 1686.379293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.381913] RSP: 002b:00007f27fef5e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.383161] RAX: ffffffffffffffda RBX: 00007f2801afbf60 RCX: 00007f28019e8b19 [ 1686.384169] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.385174] RBP: 00007f27fef5e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.386180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.387193] R13: 00007fff9f06340f R14: 00007f27fef5e300 R15: 0000000000022000 05:50:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x7, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x277) 05:50:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 9) 05:50:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 8) [ 1686.444753] FAULT_INJECTION: forcing a failure. [ 1686.444753] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.446270] CPU: 0 PID: 23327 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1686.447143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.448139] Call Trace: [ 1686.448465] dump_stack+0x107/0x167 [ 1686.448909] should_fail.cold+0x5/0xa [ 1686.449380] ? create_object.isra.0+0x3a/0xa20 [ 1686.449938] should_failslab+0x5/0x20 [ 1686.450434] kmem_cache_alloc+0x5b/0x310 [ 1686.450932] ? lock_release+0x680/0x680 [ 1686.451419] create_object.isra.0+0x3a/0xa20 [ 1686.451953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1686.452572] __kmalloc+0x16e/0x390 [ 1686.453013] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.453786] genl_family_rcv_msg_doit+0xda/0x330 [ 1686.454395] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1686.455201] ? cap_capable+0x1cd/0x230 [ 1686.455678] ? security_capable+0x95/0xc0 [ 1686.456193] ? ns_capable+0xe2/0x110 [ 1686.456648] genl_rcv_msg+0x33c/0x5a0 [ 1686.457115] ? genl_get_cmd+0x480/0x480 [ 1686.457598] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1686.458207] ? lock_release+0x680/0x680 [ 1686.458703] ? netlink_deliver_tap+0xf4/0xcc0 [ 1686.459257] netlink_rcv_skb+0x14b/0x430 [ 1686.459750] ? genl_get_cmd+0x480/0x480 [ 1686.460233] ? netlink_ack+0xab0/0xab0 [ 1686.460710] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1686.461265] ? is_vmalloc_addr+0x7b/0xb0 [ 1686.461760] genl_rcv+0x24/0x40 [ 1686.462166] netlink_unicast+0x549/0x7f0 [ 1686.462692] ? netlink_attachskb+0x870/0x870 [ 1686.463237] netlink_sendmsg+0x90f/0xdf0 [ 1686.463737] ? netlink_unicast+0x7f0/0x7f0 [ 1686.464259] ? netlink_unicast+0x7f0/0x7f0 [ 1686.464775] __sock_sendmsg+0x154/0x190 [ 1686.465260] ____sys_sendmsg+0x70d/0x870 [ 1686.465755] ? sock_write_iter+0x3d0/0x3d0 [ 1686.466269] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.466778] ? lock_downgrade+0x6d0/0x6d0 [ 1686.467289] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.467933] ___sys_sendmsg+0xf3/0x170 [ 1686.468413] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.468973] ? __fget_files+0x2cf/0x520 [ 1686.469458] ? lock_downgrade+0x6d0/0x6d0 [ 1686.469963] ? find_held_lock+0x2c/0x110 [ 1686.470475] ? __fget_files+0x2f8/0x520 [ 1686.470971] ? __fget_light+0xea/0x290 [ 1686.471451] __sys_sendmsg+0xe5/0x1b0 [ 1686.471914] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.472442] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.473020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.473661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.474299] ? trace_hardirqs_on+0x5b/0x180 [ 1686.475318] do_syscall_64+0x33/0x40 [ 1686.476209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.477450] RIP: 0033:0x7f0a68868b19 [ 1686.478367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.482542] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.483472] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1686.484343] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.485215] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.486086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.486977] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1686.499973] FAULT_INJECTION: forcing a failure. [ 1686.499973] name failslab, interval 1, probability 0, space 0, times 0 [ 1686.501422] CPU: 1 PID: 23341 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1686.502265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1686.503451] Call Trace: [ 1686.503783] dump_stack+0x107/0x167 [ 1686.504228] should_fail.cold+0x5/0xa [ 1686.504697] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.505497] should_failslab+0x5/0x20 05:50:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x4, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1686.505969] __kmalloc+0x72/0x390 [ 1686.506540] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1686.507326] genl_family_rcv_msg_doit+0xda/0x330 [ 1686.507906] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1686.508916] ? cap_capable+0x1cd/0x230 [ 1686.509400] ? security_capable+0x95/0xc0 [ 1686.509917] ? ns_capable+0xe2/0x110 [ 1686.510529] genl_rcv_msg+0x33c/0x5a0 [ 1686.510993] ? genl_get_cmd+0x480/0x480 [ 1686.511477] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1686.512087] ? lock_release+0x680/0x680 [ 1686.512567] ? netlink_deliver_tap+0xf4/0xcc0 [ 1686.513124] netlink_rcv_skb+0x14b/0x430 [ 1686.513622] ? genl_get_cmd+0x480/0x480 [ 1686.514106] ? netlink_ack+0xab0/0xab0 [ 1686.514721] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1686.515281] ? is_vmalloc_addr+0x7b/0xb0 [ 1686.515775] genl_rcv+0x24/0x40 [ 1686.516182] netlink_unicast+0x549/0x7f0 [ 1686.516681] ? netlink_attachskb+0x870/0x870 [ 1686.517222] netlink_sendmsg+0x90f/0xdf0 [ 1686.517728] ? netlink_unicast+0x7f0/0x7f0 [ 1686.518256] ? netlink_unicast+0x7f0/0x7f0 [ 1686.518909] __sock_sendmsg+0x154/0x190 [ 1686.519394] ____sys_sendmsg+0x70d/0x870 [ 1686.519893] ? sock_write_iter+0x3d0/0x3d0 [ 1686.520407] ? do_recvmmsg+0x6d0/0x6d0 [ 1686.520896] ? lock_downgrade+0x6d0/0x6d0 [ 1686.521408] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1686.522057] ___sys_sendmsg+0xf3/0x170 [ 1686.522672] ? sendmsg_copy_msghdr+0x160/0x160 [ 1686.523240] ? __fget_files+0x2cf/0x520 [ 1686.523728] ? lock_downgrade+0x6d0/0x6d0 [ 1686.524234] ? find_held_lock+0x2c/0x110 [ 1686.524735] ? __fget_files+0x2f8/0x520 [ 1686.525234] ? __fget_light+0xea/0x290 [ 1686.525726] __sys_sendmsg+0xe5/0x1b0 [ 1686.526189] ? __sys_sendmsg_sock+0x40/0x40 [ 1686.526859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1686.527442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1686.528089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1686.528713] ? trace_hardirqs_on+0x5b/0x180 [ 1686.529237] do_syscall_64+0x33/0x40 [ 1686.529700] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1686.530464] RIP: 0033:0x7f9ec6407b19 [ 1686.530919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1686.533170] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1686.534103] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1686.535114] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1686.535987] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1686.536849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1686.537720] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 05:50:51 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9, 0x5, 0x6, 0x800, 0xff, 0x26f}], "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", ['\x00']}, 0x277) 05:51:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x5, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:51:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 9) 05:51:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 10) 05:51:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x5, 0x6, 0x800, 0xff, 0x26f}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x277) [ 1700.113724] FAULT_INJECTION: forcing a failure. 05:51:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 9) [ 1700.113724] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.115134] CPU: 1 PID: 23441 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1700.116098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.117102] Call Trace: [ 1700.117429] dump_stack+0x107/0x167 [ 1700.117876] should_fail.cold+0x5/0xa [ 1700.118351] ? netlbl_mgmt_add_common+0x53/0x1870 [ 1700.118955] should_failslab+0x5/0x20 [ 1700.119769] kmem_cache_alloc_trace+0x55/0x320 [ 1700.120871] netlbl_mgmt_add_common+0x53/0x1870 [ 1700.121984] ? task_sid+0x139/0x2f0 [ 1700.122814] netlbl_mgmt_add+0x28a/0x3e0 [ 1700.123316] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1700.123929] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1700.124732] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1700.125530] genl_family_rcv_msg_doit+0x22d/0x330 [ 1700.126119] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1700.130970] ? ns_capable+0xe2/0x110 [ 1700.131433] genl_rcv_msg+0x33c/0x5a0 [ 1700.131901] ? genl_get_cmd+0x480/0x480 [ 1700.132387] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1700.133004] ? lock_release+0x680/0x680 [ 1700.133490] ? netlink_deliver_tap+0xf4/0xcc0 [ 1700.134036] netlink_rcv_skb+0x14b/0x430 [ 1700.134530] ? genl_get_cmd+0x480/0x480 [ 1700.135030] ? netlink_ack+0xab0/0xab0 [ 1700.135518] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1700.136081] ? is_vmalloc_addr+0x7b/0xb0 [ 1700.136583] genl_rcv+0x24/0x40 [ 1700.136983] netlink_unicast+0x549/0x7f0 [ 1700.137480] ? netlink_attachskb+0x870/0x870 [ 1700.138025] netlink_sendmsg+0x90f/0xdf0 [ 1700.138534] ? netlink_unicast+0x7f0/0x7f0 [ 1700.139079] ? netlink_unicast+0x7f0/0x7f0 [ 1700.139604] __sock_sendmsg+0x154/0x190 [ 1700.140092] ____sys_sendmsg+0x70d/0x870 [ 1700.140597] ? sock_write_iter+0x3d0/0x3d0 [ 1700.141119] ? do_recvmmsg+0x6d0/0x6d0 [ 1700.141605] ? lock_downgrade+0x6d0/0x6d0 [ 1700.142119] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1700.142775] ___sys_sendmsg+0xf3/0x170 [ 1700.143260] ? sendmsg_copy_msghdr+0x160/0x160 [ 1700.143822] ? __fget_files+0x2cf/0x520 [ 1700.144311] ? lock_downgrade+0x6d0/0x6d0 [ 1700.144825] ? find_held_lock+0x2c/0x110 [ 1700.145326] ? __fget_files+0x2f8/0x520 [ 1700.145824] ? __fget_light+0xea/0x290 [ 1700.146305] __sys_sendmsg+0xe5/0x1b0 [ 1700.150805] ? __sys_sendmsg_sock+0x40/0x40 [ 1700.151342] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.151922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.152573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.153202] ? trace_hardirqs_on+0x5b/0x180 [ 1700.153730] do_syscall_64+0x33/0x40 [ 1700.154184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.154830] RIP: 0033:0x7f0a68868b19 [ 1700.155287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.157557] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.158485] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1700.159379] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1700.160256] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.161131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1700.162003] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 [ 1700.170673] FAULT_INJECTION: forcing a failure. [ 1700.170673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1700.172654] CPU: 0 PID: 23458 Comm: syz-executor.3 Not tainted 5.10.228 #1 [ 1700.173569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.174671] Call Trace: [ 1700.175079] dump_stack+0x107/0x167 [ 1700.175543] should_fail.cold+0x5/0xa [ 1700.176088] _copy_from_user+0x2e/0x1b0 [ 1700.176597] kstrtouint_from_user+0xbd/0x220 [ 1700.177204] ? kstrtou8_from_user+0x210/0x210 [ 1700.177774] ? lock_acquire+0x197/0x470 [ 1700.178352] ? ksys_write+0x12d/0x260 [ 1700.178917] proc_fail_nth_write+0x78/0x220 [ 1700.179461] ? proc_task_getattr+0x1f0/0x1f0 [ 1700.180077] ? proc_task_getattr+0x1f0/0x1f0 [ 1700.180632] vfs_write+0x29a/0xb10 [ 1700.181137] ksys_write+0x12d/0x260 [ 1700.181598] ? __ia32_sys_read+0xb0/0xb0 [ 1700.182164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.182915] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.183558] do_syscall_64+0x33/0x40 [ 1700.184069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.184700] RIP: 0033:0x7f280199b5ff [ 1700.185206] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1700.187641] RSP: 002b:00007f27fef3d170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1700.188649] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f280199b5ff [ 1700.189595] RDX: 0000000000000001 RSI: 00007f27fef3d1e0 RDI: 0000000000000003 [ 1700.190525] RBP: 00007f27fef3d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.191483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1700.192446] R13: 00007fff9f06340f R14: 00007f27fef3d300 R15: 0000000000022000 [ 1700.198438] FAULT_INJECTION: forcing a failure. [ 1700.198438] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.199928] CPU: 1 PID: 23453 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1700.200776] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.201781] Call Trace: [ 1700.202107] dump_stack+0x107/0x167 [ 1700.202551] should_fail.cold+0x5/0xa [ 1700.203046] ? create_object.isra.0+0x3a/0xa20 [ 1700.203620] should_failslab+0x5/0x20 [ 1700.204088] kmem_cache_alloc+0x5b/0x310 [ 1700.204586] create_object.isra.0+0x3a/0xa20 [ 1700.205124] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.205750] __kmalloc+0x16e/0x390 [ 1700.206199] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1700.207009] genl_family_rcv_msg_doit+0xda/0x330 [ 1700.207622] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1700.208463] ? cap_capable+0x1cd/0x230 [ 1700.208965] ? security_capable+0x95/0xc0 [ 1700.209501] ? ns_capable+0xe2/0x110 [ 1700.209987] genl_rcv_msg+0x33c/0x5a0 [ 1700.210480] ? genl_get_cmd+0x480/0x480 [ 1700.210989] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1700.211602] ? lock_release+0x680/0x680 [ 1700.212085] ? netlink_deliver_tap+0xf4/0xcc0 [ 1700.212636] netlink_rcv_skb+0x14b/0x430 [ 1700.213139] ? genl_get_cmd+0x480/0x480 [ 1700.213629] ? netlink_ack+0xab0/0xab0 [ 1700.214107] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1700.214666] ? is_vmalloc_addr+0x7b/0xb0 [ 1700.215194] genl_rcv+0x24/0x40 [ 1700.215594] netlink_unicast+0x549/0x7f0 [ 1700.216089] ? netlink_attachskb+0x870/0x870 [ 1700.216630] netlink_sendmsg+0x90f/0xdf0 [ 1700.217130] ? netlink_unicast+0x7f0/0x7f0 [ 1700.217651] ? netlink_unicast+0x7f0/0x7f0 [ 1700.218168] __sock_sendmsg+0x154/0x190 [ 1700.218649] ____sys_sendmsg+0x70d/0x870 [ 1700.219167] ? sock_write_iter+0x3d0/0x3d0 [ 1700.219679] ? do_recvmmsg+0x6d0/0x6d0 [ 1700.220155] ? lock_downgrade+0x6d0/0x6d0 [ 1700.220668] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1700.221315] ___sys_sendmsg+0xf3/0x170 [ 1700.221791] ? sendmsg_copy_msghdr+0x160/0x160 [ 1700.222350] ? __fget_files+0x2cf/0x520 [ 1700.222854] ? lock_downgrade+0x6d0/0x6d0 [ 1700.223360] ? find_held_lock+0x2c/0x110 [ 1700.223860] ? __fget_files+0x2f8/0x520 [ 1700.224361] ? __fget_light+0xea/0x290 [ 1700.224839] __sys_sendmsg+0xe5/0x1b0 [ 1700.225304] ? __sys_sendmsg_sock+0x40/0x40 [ 1700.225828] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.226407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.227065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.227696] ? trace_hardirqs_on+0x5b/0x180 [ 1700.228224] do_syscall_64+0x33/0x40 [ 1700.228681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.229305] RIP: 0033:0x7f9ec6407b19 [ 1700.229757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.232038] RSP: 002b:00007f9ec397d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.232966] RAX: ffffffffffffffda RBX: 00007f9ec651af60 RCX: 00007f9ec6407b19 [ 1700.233829] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1700.234708] RBP: 00007f9ec397d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.235604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.236469] R13: 00007ffe25699b9f R14: 00007f9ec397d300 R15: 0000000000022000 05:51:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6, 0x800, 0xff, 0x26f}], "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", ['\x00']}, 0x277) 05:51:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x6, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xff, 0x26f}], "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", ['\x00']}, 0x277) 05:51:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x26f}], "b8da2141a666162ead63eef1eef51ea39df5d43da90e9b6748163f8f264aa0d4b4479c65a521e47823c421d42ee8329062e334ba444b4550330bddb6ea15aa5d79c74079ac8a9bee216b3118e9f1d4c722ef8200742ad95aa41c0dbf4ea5e6f91e51de0b49d987699855e9ad5aa2a075db38e500adaf65b93bb3db5b58d48123d998e82d83764b93e90b9c525576badb56620474b4ce03b6d251f824076385dbbda66cf970102c1f7e3b62963ae7fa43b56a6395fdf6643f7d970e37afbaeeaaa210a7408b1fb51f7353f56739ca3a0439198dfbfa3ed77ae23af3febc69321be2c2d32f437d190f7809e55f40452e109daa33614b72206788031487fa70c5", ['\x00']}, 0x277) 05:51:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 11) 05:51:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 05:51:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) (fail_nth: 10) 05:51:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26f}], "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", ['\x00']}, 0x277) [ 1700.416644] FAULT_INJECTION: forcing a failure. [ 1700.416644] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.418064] CPU: 1 PID: 23579 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1700.418921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1700.419927] Call Trace: [ 1700.420255] dump_stack+0x107/0x167 [ 1700.420701] should_fail.cold+0x5/0xa [ 1700.421171] ? create_object.isra.0+0x3a/0xa20 [ 1700.421738] should_failslab+0x5/0x20 [ 1700.422205] kmem_cache_alloc+0x5b/0x310 [ 1700.422714] create_object.isra.0+0x3a/0xa20 [ 1700.423258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1700.423880] kmem_cache_alloc_trace+0x151/0x320 [ 1700.424455] netlbl_mgmt_add_common+0x53/0x1870 [ 1700.425026] ? task_sid+0x139/0x2f0 [ 1700.425477] netlbl_mgmt_add+0x28a/0x3e0 [ 1700.425971] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1700.426587] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1700.427407] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1700.428206] genl_family_rcv_msg_doit+0x22d/0x330 [ 1700.428798] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1700.429616] ? ns_capable+0xe2/0x110 [ 1700.430073] genl_rcv_msg+0x33c/0x5a0 [ 1700.430542] ? genl_get_cmd+0x480/0x480 [ 1700.431052] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1700.431664] ? lock_release+0x680/0x680 [ 1700.432143] ? netlink_deliver_tap+0xf4/0xcc0 [ 1700.432688] netlink_rcv_skb+0x14b/0x430 [ 1700.433179] ? genl_get_cmd+0x480/0x480 [ 1700.433662] ? netlink_ack+0xab0/0xab0 [ 1700.434140] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1700.434692] ? is_vmalloc_addr+0x7b/0xb0 [ 1700.435218] genl_rcv+0x24/0x40 [ 1700.435617] netlink_unicast+0x549/0x7f0 [ 1700.436112] ? netlink_attachskb+0x870/0x870 [ 1700.436652] netlink_sendmsg+0x90f/0xdf0 [ 1700.437147] ? netlink_unicast+0x7f0/0x7f0 [ 1700.437667] ? netlink_unicast+0x7f0/0x7f0 [ 1700.438179] __sock_sendmsg+0x154/0x190 [ 1700.438662] ____sys_sendmsg+0x70d/0x870 [ 1700.439181] ? sock_write_iter+0x3d0/0x3d0 [ 1700.439695] ? do_recvmmsg+0x6d0/0x6d0 [ 1700.440172] ? lock_downgrade+0x6d0/0x6d0 [ 1700.440677] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1700.441317] ___sys_sendmsg+0xf3/0x170 [ 1700.441793] ? sendmsg_copy_msghdr+0x160/0x160 [ 1700.442351] ? __fget_files+0x2cf/0x520 [ 1700.442851] ? lock_downgrade+0x6d0/0x6d0 [ 1700.443357] ? find_held_lock+0x2c/0x110 [ 1700.443859] ? __fget_files+0x2f8/0x520 [ 1700.444350] ? __fget_light+0xea/0x290 [ 1700.444828] __sys_sendmsg+0xe5/0x1b0 [ 1700.445293] ? __sys_sendmsg_sock+0x40/0x40 [ 1700.445816] ? rcu_read_lock_any_held+0x75/0xa0 [ 1700.446396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1700.447058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1700.447684] ? trace_hardirqs_on+0x5b/0x180 [ 1700.448210] do_syscall_64+0x33/0x40 [ 1700.448663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1700.449284] RIP: 0033:0x7f0a68868b19 [ 1700.449733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1700.451986] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.452913] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1700.453779] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1700.454644] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1700.455527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1700.456395] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x7, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000002, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 12) 05:51:18 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00']}, 0x277) [ 1713.686895] FAULT_INJECTION: forcing a failure. [ 1713.686895] name failslab, interval 1, probability 0, space 0, times 0 [ 1713.688418] CPU: 0 PID: 23707 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1713.689334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1713.690391] Call Trace: [ 1713.690725] dump_stack+0x107/0x167 [ 1713.691240] should_fail.cold+0x5/0xa [ 1713.691723] ? netlbl_mgmt_add_common+0x17d/0x1870 [ 1713.692381] should_failslab+0x5/0x20 [ 1713.692966] __kmalloc+0x72/0x390 [ 1713.693390] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1713.694316] netlbl_mgmt_add_common+0x17d/0x1870 [ 1713.694943] ? task_sid+0x139/0x2f0 [ 1713.695411] netlbl_mgmt_add+0x28a/0x3e0 [ 1713.695955] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1713.696572] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1713.697450] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1713.698297] genl_family_rcv_msg_doit+0x22d/0x330 [ 1713.698936] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1713.699776] ? ns_capable+0xe2/0x110 [ 1713.700287] genl_rcv_msg+0x33c/0x5a0 [ 1713.700763] ? genl_get_cmd+0x480/0x480 [ 1713.701331] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1713.701999] ? lock_release+0x680/0x680 [ 1713.702483] ? netlink_deliver_tap+0xf4/0xcc0 [ 1713.703083] netlink_rcv_skb+0x14b/0x430 [ 1713.703601] ? genl_get_cmd+0x480/0x480 [ 1713.704137] ? netlink_ack+0xab0/0xab0 [ 1713.704615] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1713.705224] ? is_vmalloc_addr+0x7b/0xb0 [ 1713.705726] genl_rcv+0x24/0x40 [ 1713.706208] netlink_unicast+0x549/0x7f0 [ 1713.706714] ? netlink_attachskb+0x870/0x870 [ 1713.707319] netlink_sendmsg+0x90f/0xdf0 [ 1713.707874] ? netlink_unicast+0x7f0/0x7f0 [ 1713.708405] ? netlink_unicast+0x7f0/0x7f0 [ 1713.708973] __sock_sendmsg+0x154/0x190 [ 1713.709467] ____sys_sendmsg+0x70d/0x870 [ 1713.710045] ? sock_write_iter+0x3d0/0x3d0 [ 1713.710570] ? do_recvmmsg+0x6d0/0x6d0 [ 1713.711105] ? lock_downgrade+0x6d0/0x6d0 [ 1713.711642] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1713.712345] ___sys_sendmsg+0xf3/0x170 [ 1713.712875] ? sendmsg_copy_msghdr+0x160/0x160 [ 1713.713446] ? __fget_files+0x2cf/0x520 [ 1713.713988] ? lock_downgrade+0x6d0/0x6d0 [ 1713.714505] ? find_held_lock+0x2c/0x110 [ 1713.715090] ? __fget_files+0x2f8/0x520 [ 1713.715607] ? __fget_light+0xea/0x290 [ 1713.716147] __sys_sendmsg+0xe5/0x1b0 [ 1713.716618] ? __sys_sendmsg_sock+0x40/0x40 [ 1713.717205] ? rcu_read_lock_any_held+0x75/0xa0 [ 1713.717834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1713.718494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1713.719212] ? trace_hardirqs_on+0x5b/0x180 [ 1713.719746] do_syscall_64+0x33/0x40 [ 1713.720255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1713.720940] RIP: 0033:0x7f0a68868b19 [ 1713.721402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1713.723848] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1713.724833] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1713.725724] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1713.726653] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1713.727625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1713.728557] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00']}, 0x277) 05:51:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000008, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x8, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 13) [ 1726.971337] FAULT_INJECTION: forcing a failure. [ 1726.971337] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.976759] CPU: 1 PID: 23841 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1726.977595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.978605] Call Trace: [ 1726.978935] dump_stack+0x107/0x167 [ 1726.979388] should_fail.cold+0x5/0xa [ 1726.979870] ? create_object.isra.0+0x3a/0xa20 [ 1726.980431] should_failslab+0x5/0x20 [ 1726.980906] kmem_cache_alloc+0x5b/0x310 [ 1726.981410] ? mark_held_locks+0x9e/0xe0 [ 1726.981906] create_object.isra.0+0x3a/0xa20 [ 1726.982440] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.983069] __kmalloc+0x16e/0x390 [ 1726.983516] netlbl_mgmt_add_common+0x17d/0x1870 [ 1726.984107] ? task_sid+0x139/0x2f0 [ 1726.984557] netlbl_mgmt_add+0x28a/0x3e0 [ 1726.985060] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1726.985678] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1726.986483] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1726.987283] genl_family_rcv_msg_doit+0x22d/0x330 [ 1726.987898] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1726.988713] ? ns_capable+0xe2/0x110 [ 1726.989172] genl_rcv_msg+0x33c/0x5a0 [ 1726.989648] ? genl_get_cmd+0x480/0x480 [ 1726.990135] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1726.990752] ? lock_release+0x680/0x680 [ 1726.991236] ? netlink_deliver_tap+0xf4/0xcc0 [ 1726.991807] netlink_rcv_skb+0x14b/0x430 [ 1726.992301] ? genl_get_cmd+0x480/0x480 [ 1726.992787] ? netlink_ack+0xab0/0xab0 [ 1726.993268] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1726.993834] ? is_vmalloc_addr+0x7b/0xb0 [ 1726.994333] genl_rcv+0x24/0x40 [ 1726.994735] netlink_unicast+0x549/0x7f0 [ 1726.995234] ? netlink_attachskb+0x870/0x870 [ 1726.995797] netlink_sendmsg+0x90f/0xdf0 [ 1726.996297] ? netlink_unicast+0x7f0/0x7f0 [ 1726.996821] ? netlink_unicast+0x7f0/0x7f0 [ 1726.997339] __sock_sendmsg+0x154/0x190 [ 1726.997824] ____sys_sendmsg+0x70d/0x870 [ 1726.998320] ? sock_write_iter+0x3d0/0x3d0 [ 1726.998833] ? do_recvmmsg+0x6d0/0x6d0 [ 1726.999313] ? lock_downgrade+0x6d0/0x6d0 [ 1727.003847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1727.004488] ___sys_sendmsg+0xf3/0x170 [ 1727.004963] ? sendmsg_copy_msghdr+0x160/0x160 [ 1727.005521] ? __fget_files+0x2cf/0x520 [ 1727.006004] ? lock_downgrade+0x6d0/0x6d0 [ 1727.006509] ? find_held_lock+0x2c/0x110 [ 1727.007010] ? __fget_files+0x2f8/0x520 [ 1727.007498] ? __fget_light+0xea/0x290 [ 1727.007996] __sys_sendmsg+0xe5/0x1b0 [ 1727.008461] ? __sys_sendmsg_sock+0x40/0x40 [ 1727.008984] ? rcu_read_lock_any_held+0x75/0xa0 [ 1727.009561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.010199] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.010822] ? trace_hardirqs_on+0x5b/0x180 [ 1727.011346] do_syscall_64+0x33/0x40 [ 1727.011830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.012456] RIP: 0033:0x7f0a68868b19 [ 1727.012908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.015142] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1727.016095] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1727.016959] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1727.017823] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.018686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.019561] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", ['\x00']}, 0x178) 05:51:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x9, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:51:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x500000f, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 14) 05:51:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (fail_nth: 1) 05:51:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1727.223502] FAULT_INJECTION: forcing a failure. [ 1727.223502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.225015] CPU: 1 PID: 23999 Comm: syz-executor.6 Not tainted 5.10.228 #1 [ 1727.225853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.226856] Call Trace: 05:51:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xa, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1727.227182] dump_stack+0x107/0x167 [ 1727.227645] should_fail.cold+0x5/0xa [ 1727.228117] ? rfkill_sync_work+0xa0/0xa0 [ 1727.228635] _copy_from_user+0x2e/0x1b0 [ 1727.229123] ? rfkill_sync_work+0xa0/0xa0 [ 1727.229633] rfkill_fop_write+0xb4/0x4b0 [ 1727.235603] ? rfkill_sync_work+0xa0/0xa0 [ 1727.236109] ? security_file_permission+0xb1/0xe0 [ 1727.236697] ? rfkill_sync_work+0xa0/0xa0 [ 1727.237203] vfs_write+0x29a/0xb10 [ 1727.237639] ksys_write+0x1f6/0x260 [ 1727.238082] ? __ia32_sys_read+0xb0/0xb0 [ 1727.238580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.239217] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.239862] do_syscall_64+0x33/0x40 [ 1727.240316] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.240937] RIP: 0033:0x7fc843530b19 [ 1727.241392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.243646] RSP: 002b:00007fc840aa6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1727.244572] RAX: ffffffffffffffda RBX: 00007fc843643f60 RCX: 00007fc843530b19 [ 1727.245438] RDX: 0000000000000078 RSI: 0000000020000140 RDI: 0000000000000003 [ 1727.246303] RBP: 00007fc840aa61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.247178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.248064] R13: 00007ffee50b8f6f R14: 00007fc840aa6300 R15: 0000000000022000 [ 1727.286309] FAULT_INJECTION: forcing a failure. [ 1727.286309] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.287875] CPU: 0 PID: 24059 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1727.288714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.289717] Call Trace: [ 1727.290044] dump_stack+0x107/0x167 [ 1727.290494] should_fail.cold+0x5/0xa [ 1727.290964] ? netlbl_mgmt_add_common+0x5e5/0x1870 [ 1727.291603] should_failslab+0x5/0x20 [ 1727.292080] kmem_cache_alloc_trace+0x55/0x320 [ 1727.292641] netlbl_mgmt_add_common+0x5e5/0x1870 [ 1727.293220] ? task_sid+0x139/0x2f0 [ 1727.293671] netlbl_mgmt_add+0x28a/0x3e0 [ 1727.294164] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1727.294776] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1727.295611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1727.296416] genl_family_rcv_msg_doit+0x22d/0x330 [ 1727.297010] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1727.297828] ? ns_capable+0xe2/0x110 [ 1727.298290] genl_rcv_msg+0x33c/0x5a0 [ 1727.298755] ? genl_get_cmd+0x480/0x480 [ 1727.299251] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1727.299902] ? lock_release+0x680/0x680 [ 1727.300389] ? netlink_deliver_tap+0xf4/0xcc0 [ 1727.300944] netlink_rcv_skb+0x14b/0x430 [ 1727.301439] ? genl_get_cmd+0x480/0x480 [ 1727.301929] ? netlink_ack+0xab0/0xab0 [ 1727.302413] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1727.302970] ? is_vmalloc_addr+0x7b/0xb0 [ 1727.303471] genl_rcv+0x24/0x40 [ 1727.303910] netlink_unicast+0x549/0x7f0 [ 1727.304412] ? netlink_attachskb+0x870/0x870 [ 1727.304959] netlink_sendmsg+0x90f/0xdf0 [ 1727.305457] ? netlink_unicast+0x7f0/0x7f0 [ 1727.305979] ? netlink_unicast+0x7f0/0x7f0 [ 1727.306498] __sock_sendmsg+0x154/0x190 [ 1727.306983] ____sys_sendmsg+0x70d/0x870 [ 1727.307482] ? sock_write_iter+0x3d0/0x3d0 [ 1727.308040] ? do_recvmmsg+0x6d0/0x6d0 [ 1727.308521] ? lock_downgrade+0x6d0/0x6d0 [ 1727.309027] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1727.309669] ___sys_sendmsg+0xf3/0x170 [ 1727.310146] ? sendmsg_copy_msghdr+0x160/0x160 [ 1727.310707] ? __fget_files+0x2cf/0x520 [ 1727.311198] ? lock_downgrade+0x6d0/0x6d0 [ 1727.311739] ? find_held_lock+0x2c/0x110 [ 1727.312243] ? __fget_files+0x2f8/0x520 [ 1727.312737] ? __fget_light+0xea/0x290 [ 1727.313218] __sys_sendmsg+0xe5/0x1b0 [ 1727.313685] ? __sys_sendmsg_sock+0x40/0x40 [ 1727.314213] ? rcu_read_lock_any_held+0x75/0xa0 [ 1727.314795] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.315442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.316106] ? trace_hardirqs_on+0x5b/0x180 [ 1727.316638] do_syscall_64+0x33/0x40 [ 1727.317092] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.317717] RIP: 0033:0x7f0a68868b19 [ 1727.318173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.320452] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1727.321380] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1727.322249] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1727.323116] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.324023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.324896] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1740.679789] FAULT_INJECTION: forcing a failure. [ 1740.679789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1740.681389] CPU: 0 PID: 24215 Comm: syz-executor.6 Not tainted 5.10.228 #1 [ 1740.682281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.683346] Call Trace: [ 1740.683697] dump_stack+0x107/0x167 [ 1740.684193] should_fail.cold+0x5/0xa [ 1740.684703] _copy_to_user+0x2e/0x180 [ 1740.684907] FAULT_INJECTION: forcing a failure. [ 1740.684907] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.685193] simple_read_from_buffer+0xcc/0x160 [ 1740.687104] proc_fail_nth_read+0x198/0x230 [ 1740.687639] ? proc_sessionid_read+0x230/0x230 [ 1740.688219] ? security_file_permission+0xb1/0xe0 [ 1740.688812] ? proc_sessionid_read+0x230/0x230 [ 1740.689374] vfs_read+0x228/0x620 [ 1740.689810] ksys_read+0x12d/0x260 [ 1740.690247] ? vfs_write+0xb10/0xb10 [ 1740.690714] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1740.691357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.691998] do_syscall_64+0x33/0x40 [ 1740.692465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1740.693098] RIP: 0033:0x7fc8434e369c [ 1740.693554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1740.695793] RSP: 002b:00007fc840aa6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1740.696734] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc8434e369c [ 1740.697597] RDX: 000000000000000f RSI: 00007fc840aa61e0 RDI: 0000000000000004 [ 1740.698460] RBP: 00007fc840aa61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.699321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.700212] R13: 00007ffee50b8f6f R14: 00007fc840aa6300 R15: 0000000000022000 [ 1740.701100] CPU: 1 PID: 24214 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1740.701984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1740.703050] Call Trace: [ 1740.703402] dump_stack+0x107/0x167 [ 1740.703878] should_fail.cold+0x5/0xa [ 1740.704417] ? create_object.isra.0+0x3a/0xa20 [ 1740.705025] should_failslab+0x5/0x20 05:51:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000f00, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (fail_nth: 2) 05:51:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xb, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 15) 05:51:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1740.705507] kmem_cache_alloc+0x5b/0x310 [ 1740.712488] ? mark_held_locks+0x9e/0xe0 [ 1740.713019] create_object.isra.0+0x3a/0xa20 [ 1740.713585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1740.720635] kmem_cache_alloc_trace+0x151/0x320 [ 1740.721244] netlbl_mgmt_add_common+0x5e5/0x1870 [ 1740.721847] ? task_sid+0x139/0x2f0 [ 1740.722329] netlbl_mgmt_add+0x28a/0x3e0 [ 1740.722851] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1740.723507] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1740.724387] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1740.725236] genl_family_rcv_msg_doit+0x22d/0x330 [ 1740.725879] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1740.726767] ? ns_capable+0xe2/0x110 [ 1740.727262] genl_rcv_msg+0x33c/0x5a0 [ 1740.727773] ? genl_get_cmd+0x480/0x480 [ 1740.728319] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1740.728994] ? lock_release+0x680/0x680 [ 1740.729514] ? netlink_deliver_tap+0xf4/0xcc0 [ 1740.730111] netlink_rcv_skb+0x14b/0x430 [ 1740.730643] ? genl_get_cmd+0x480/0x480 [ 1740.731173] ? netlink_ack+0xab0/0xab0 [ 1740.731691] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1740.732315] ? is_vmalloc_addr+0x7b/0xb0 [ 1740.732849] genl_rcv+0x24/0x40 [ 1740.733292] netlink_unicast+0x549/0x7f0 [ 1740.733827] ? netlink_attachskb+0x870/0x870 [ 1740.734424] netlink_sendmsg+0x90f/0xdf0 [ 1740.734961] ? netlink_unicast+0x7f0/0x7f0 [ 1740.735537] ? netlink_unicast+0x7f0/0x7f0 [ 1740.736110] __sock_sendmsg+0x154/0x190 [ 1740.736645] ____sys_sendmsg+0x70d/0x870 [ 1740.737195] ? sock_write_iter+0x3d0/0x3d0 [ 1740.737761] ? do_recvmmsg+0x6d0/0x6d0 [ 1740.738276] ? lock_downgrade+0x6d0/0x6d0 [ 1740.738832] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1740.739519] ___sys_sendmsg+0xf3/0x170 [ 1740.740035] ? sendmsg_copy_msghdr+0x160/0x160 [ 1740.740635] ? __fget_files+0x2cf/0x520 [ 1740.741152] ? lock_downgrade+0x6d0/0x6d0 [ 1740.741674] ? find_held_lock+0x2c/0x110 [ 1740.742219] ? __fget_files+0x2f8/0x520 [ 1740.742758] ? __fget_light+0xea/0x290 [ 1740.743283] __sys_sendmsg+0xe5/0x1b0 [ 1740.743782] ? __sys_sendmsg_sock+0x40/0x40 [ 1740.744374] ? rcu_read_lock_any_held+0x75/0xa0 [ 1740.745004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1740.745695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1740.746380] ? trace_hardirqs_on+0x5b/0x180 [ 1740.746953] do_syscall_64+0x33/0x40 [ 1740.747448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1740.748130] RIP: 0033:0x7f0a68868b19 [ 1740.748639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1740.751036] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1740.752063] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1740.753001] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1740.753938] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1740.754876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1740.755784] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:51:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xc, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xf, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:59 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:51:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xd, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x0, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x6, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xc0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 16) 05:51:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1755.173934] FAULT_INJECTION: forcing a failure. [ 1755.173934] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.175481] CPU: 0 PID: 24359 Comm: syz-executor.2 Not tainted 5.10.228 #1 [ 1755.176322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1755.177341] Call Trace: [ 1755.177667] dump_stack+0x107/0x167 [ 1755.178116] should_fail.cold+0x5/0xa [ 1755.178584] ? netlbl_mgmt_add_common+0x1067/0x1870 [ 1755.179198] should_failslab+0x5/0x20 [ 1755.179667] kmem_cache_alloc_trace+0x55/0x320 [ 1755.180224] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1755.180864] netlbl_mgmt_add_common+0x1067/0x1870 [ 1755.181452] ? task_sid+0x139/0x2f0 [ 1755.181901] netlbl_mgmt_add+0x28a/0x3e0 [ 1755.182405] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1755.183022] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1755.183830] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1755.184640] genl_family_rcv_msg_doit+0x22d/0x330 [ 1755.185229] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1755.186048] ? ns_capable+0xe2/0x110 [ 1755.186513] genl_rcv_msg+0x33c/0x5a0 [ 1755.186982] ? genl_get_cmd+0x480/0x480 [ 1755.187479] ? netlbl_mgmt_add_common+0x1870/0x1870 [ 1755.188093] ? lock_release+0x680/0x680 [ 1755.188585] ? netlink_deliver_tap+0xf4/0xcc0 [ 1755.189140] netlink_rcv_skb+0x14b/0x430 [ 1755.189635] ? genl_get_cmd+0x480/0x480 [ 1755.190120] ? netlink_ack+0xab0/0xab0 [ 1755.190608] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1755.191169] ? is_vmalloc_addr+0x7b/0xb0 [ 1755.191666] genl_rcv+0x24/0x40 [ 1755.192069] netlink_unicast+0x549/0x7f0 [ 1755.192585] ? netlink_attachskb+0x870/0x870 [ 1755.193129] netlink_sendmsg+0x90f/0xdf0 [ 1755.193634] ? netlink_unicast+0x7f0/0x7f0 [ 1755.194162] ? netlink_unicast+0x7f0/0x7f0 [ 1755.194685] __sock_sendmsg+0x154/0x190 [ 1755.195169] ____sys_sendmsg+0x70d/0x870 [ 1755.195667] ? sock_write_iter+0x3d0/0x3d0 [ 1755.196191] ? do_recvmmsg+0x6d0/0x6d0 [ 1755.196688] ? lock_downgrade+0x6d0/0x6d0 [ 1755.197197] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1755.197841] ___sys_sendmsg+0xf3/0x170 [ 1755.198333] ? sendmsg_copy_msghdr+0x160/0x160 [ 1755.198895] ? __fget_files+0x2cf/0x520 [ 1755.199381] ? lock_downgrade+0x6d0/0x6d0 [ 1755.199889] ? find_held_lock+0x2c/0x110 [ 1755.200410] ? __fget_files+0x2f8/0x520 [ 1755.200908] ? __fget_light+0xea/0x290 [ 1755.201388] __sys_sendmsg+0xe5/0x1b0 [ 1755.201852] ? __sys_sendmsg_sock+0x40/0x40 [ 1755.202385] ? rcu_read_lock_any_held+0x75/0xa0 [ 1755.202966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1755.203610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1755.204236] ? trace_hardirqs_on+0x5b/0x180 [ 1755.204792] do_syscall_64+0x33/0x40 [ 1755.205252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1755.205882] RIP: 0033:0x7f0a68868b19 [ 1755.206345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1755.208633] RSP: 002b:00007f0a65dde188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1755.209559] RAX: ffffffffffffffda RBX: 00007f0a6897bf60 RCX: 00007f0a68868b19 [ 1755.210444] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1755.211326] RBP: 00007f0a65dde1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1755.212194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.213096] R13: 00007fff64774e0f R14: 00007f0a65dde300 R15: 0000000000022000 05:51:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) (fail_nth: 17) 05:51:59 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xec0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:51:59 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:51:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:51:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xe, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:59 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:51:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:12 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0xf, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:12 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:52:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf0}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x20000240, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xa, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x10, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:26 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:52:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 05:52:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x11, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000002, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:26 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000003, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x12, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 05:52:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x500}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:26 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x600}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x13, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000004, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x8, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:42 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 05:52:42 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:52:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x11, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000005, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:42 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x14, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x700}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000006, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:42 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x2, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x15, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:52:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x8, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0x900}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:56 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000007, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000008, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:56 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0xf, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:52:56 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:52:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x16, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf00}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:52:56 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:52:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0xf00, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:10 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:53:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000009, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf000}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:10 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:10 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x17, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x80000, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:10 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:10 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:10 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x500000a, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xf600}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x1000000, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:23 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:53:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{0x39, 0x0, 0xffff}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x18, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xb00, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:23 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:23 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x500000b, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:23 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x500000f, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:23 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x2000000, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:24 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x19, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x3, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0xf000000, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:24 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1839.673411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1839.707551] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 05:53:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000010, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:37 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:53:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x5, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x1100, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x1a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0xffffff7f, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1852.785699] netlink: 'syz-executor.7': attribute type 3 has an invalid length. 05:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x30000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000011, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1852.885618] netlink: 'syz-executor.7': attribute type 3 has an invalid length. 05:53:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:37 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x1b, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x6, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x34000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:37 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1853.083537] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1853.130675] netlink: 'syz-executor.7': attribute type 3 has an invalid length. 05:53:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000300, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:50 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:53:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x9, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:53:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x2, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x80000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x1c, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:50 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1866.375521] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1866.376544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 05:53:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000500, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x8, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:53:50 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x400300, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:53:50 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x1d, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1866.444423] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1866.445495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 05:53:50 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:53:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0xa, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 1866.584428] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1866.585467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1866.599995] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1866.600990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000600, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0xf, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:04 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:04 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x1e, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:04 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1880.304405] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1880.305836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:04 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000700, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:04 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:04 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0xf00, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1880.402288] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1880.403426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:18 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:18 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x10, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x80000, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x21, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000900, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:18 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:18 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:18 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) [ 1893.710461] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1893.711418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x1000000, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000a00, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) [ 1893.789231] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1893.790211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:18 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 05:54:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x11, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x22, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x2000000, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1893.929962] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1893.930991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1893.961512] netlink: 'syz-executor.7': attribute type 3 has an invalid length. [ 1893.962474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:31 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x18, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 05:54:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000b00, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0xf000000, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x23, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0xffffff7f, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1907.131491] netlink: 'syz-executor.7': attribute type 3 has an invalid length. 05:54:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:31 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000f00, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x24, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:31 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) [ 1907.228694] netlink: 'syz-executor.7': attribute type 3 has an invalid length. 05:54:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x7000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x25, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5001100, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x39, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x8, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(0xffffffffffffffff, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:44 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x7000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1920.452331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:44 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:44 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:44 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x26, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1920.480621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x2, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xc000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x69, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:45 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x24, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:45 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) [ 1920.660495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1920.699641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.7'. 05:54:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x9000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0xf, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:58 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x27, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x0, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:58 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x25000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:54:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xf, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x502}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xa000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x28, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:54:58 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x50f}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:54:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xb000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:54:58 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x29, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:58 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:54:58 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xe0000003}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:55:19 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:55:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xf000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:55:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:55:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xc0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xe0000008}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:55:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2a, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xec0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, [{}]}, 0x78) 05:55:19 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2b, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:55:19 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, [{}]}, 0x78) [ 1955.244454] netlink: 'syz-executor.7': attribute type 8 has an invalid length. [ 1955.267857] netlink: 'syz-executor.7': attribute type 8 has an invalid length. 05:55:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x20000240, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x11000000, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:55:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:55:33 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40}, [{}]}, 0x78) 05:55:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2c, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x25000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x0, 0x0, &(0x7f0000000180)={[0x80000000]}, 0x8) 05:55:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000002, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:34 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (fail_nth: 1) [ 1969.609970] FAULT_INJECTION: forcing a failure. [ 1969.609970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.611477] CPU: 0 PID: 25837 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1969.612313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.613313] Call Trace: [ 1969.613638] dump_stack+0x107/0x167 [ 1969.614080] should_fail.cold+0x5/0xa [ 1969.614548] ? rfkill_sync_work+0xa0/0xa0 [ 1969.615053] _copy_from_user+0x2e/0x1b0 [ 1969.615558] ? rfkill_sync_work+0xa0/0xa0 [ 1969.616059] rfkill_fop_write+0xb4/0x4b0 [ 1969.616559] ? rfkill_sync_work+0xa0/0xa0 [ 1969.617064] ? security_file_permission+0xb1/0xe0 [ 1969.617655] ? rfkill_sync_work+0xa0/0xa0 [ 1969.618162] vfs_write+0x29a/0xb10 [ 1969.618600] ksys_write+0x1f6/0x260 [ 1969.619045] ? __ia32_sys_read+0xb0/0xb0 [ 1969.619559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1969.620201] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1969.620837] do_syscall_64+0x33/0x40 [ 1969.621293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1969.621917] RIP: 0033:0x7f89a3317b19 [ 1969.622371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.624632] RSP: 002b:00007f89a088d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1969.625558] RAX: ffffffffffffffda RBX: 00007f89a342af60 RCX: 00007f89a3317b19 [ 1969.626425] RDX: 0000000000000078 RSI: 0000000020000140 RDI: 0000000000000003 [ 1969.627308] RBP: 00007f89a088d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.628177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.629046] R13: 00007ffc507cacbf R14: 00007f89a088d300 R15: 0000000000022000 05:55:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:55:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x7ffff000, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:47 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) 05:55:47 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) (fail_nth: 2) [ 1982.704970] FAULT_INJECTION: forcing a failure. [ 1982.704970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.706577] CPU: 1 PID: 25848 Comm: syz-executor.4 Not tainted 5.10.228 #1 05:55:47 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x40}, [{}]}, 0x78) [ 1982.707457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1982.709405] Call Trace: [ 1982.709798] dump_stack+0x107/0x167 [ 1982.710248] should_fail.cold+0x5/0xa [ 1982.710759] _copy_to_user+0x2e/0x180 [ 1982.711239] simple_read_from_buffer+0xcc/0x160 [ 1982.711941] proc_fail_nth_read+0x198/0x230 [ 1982.712470] ? proc_sessionid_read+0x230/0x230 [ 1982.713070] ? security_file_permission+0xb1/0xe0 [ 1982.713660] ? proc_sessionid_read+0x230/0x230 [ 1982.714285] vfs_read+0x228/0x620 05:55:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:55:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2d, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1982.715491] ksys_read+0x12d/0x260 [ 1982.716014] ? vfs_write+0xb10/0xb10 [ 1982.716480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1982.717171] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1982.717877] do_syscall_64+0x33/0x40 [ 1982.718341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1982.720139] RIP: 0033:0x7f89a32ca69c [ 1982.720592] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 05:55:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1982.722989] RSP: 002b:00007f89a088d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1982.725946] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f89a32ca69c [ 1982.726877] RDX: 000000000000000f RSI: 00007f89a088d1e0 RDI: 0000000000000004 [ 1982.727844] RBP: 00007f89a088d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1982.728770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1982.729651] R13: 00007ffc507cacbf R14: 00007f89a088d300 R15: 0000000000022000 05:55:47 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x40}, [{}]}, 0x78) 05:55:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xf}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0xfffffdef, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0xf, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:55:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:55:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xf00}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:55:47 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x40}, [{}]}, 0x78) 05:56:00 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2e, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:00 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) 05:56:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:56:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:56:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:00 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x40}, [{}]}, 0x78) 05:56:00 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x80000}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:00 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:00 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40}, [{}]}, 0x78) 05:56:00 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0xc0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) [ 1996.127412] netlink: 'syz-executor.7': attribute type 16 has an invalid length. 05:56:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x8, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) [ 1996.208826] netlink: 'syz-executor.7': attribute type 16 has an invalid length. 05:56:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1000000}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:13 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, 0x0, 0x0) 05:56:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0xc, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40}, [{}]}, 0x78) 05:56:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0xec0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:56:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2f, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:56:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x2000000}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40}, [{}]}, 0x78) 05:56:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:13 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x33fe0, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:56:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x30, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:13 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x40}, [{}]}, 0x78) 05:56:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x69, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:56:13 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:26 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180), 0x8) 05:56:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:56:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xf000000}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:26 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x40}, [{}]}, 0x78) 05:56:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x2, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x31, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xffffff7f}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x3, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:26 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40}, [{}]}, 0x78) 05:56:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x129, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) [ 2022.421543] [ 2022.421805] ====================================================== [ 2022.422609] WARNING: possible circular locking dependency detected [ 2022.423411] 5.10.228 #1 Not tainted [ 2022.423870] ------------------------------------------------------ [ 2022.424665] syz-executor.4/26029 is trying to acquire lock: [ 2022.425394] ffff88800e748ae8 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2022.426644] [ 2022.426644] but task is already holding lock: [ 2022.427395] ffff88800e748f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2022.428506] [ 2022.428506] which lock already depends on the new lock. [ 2022.428506] [ 2022.429573] [ 2022.429573] the existing dependency chain (in reverse order) is: [ 2022.430525] [ 2022.430525] -> #3 (&hdev->req_lock){+.+.}-{3:3}: [ 2022.431365] __mutex_lock+0x13d/0x10b0 [ 2022.431928] hci_dev_do_close+0xef/0x1240 [ 2022.432531] hci_rfkill_set_block+0x166/0x1a0 [ 2022.433183] rfkill_set_block+0x1fd/0x540 [ 2022.433788] rfkill_fop_write+0x253/0x4b0 [ 2022.434390] vfs_write+0x29a/0xb10 [ 2022.434912] ksys_write+0x1f6/0x260 [ 2022.435442] do_syscall_64+0x33/0x40 [ 2022.435981] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.436695] [ 2022.436695] -> #2 (rfkill_global_mutex){+.+.}-{3:3}: [ 2022.437820] __mutex_lock+0x13d/0x10b0 [ 2022.438392] rfkill_register+0x36/0xa10 [ 2022.438958] hci_register_dev+0x42e/0xc00 [ 2022.439556] __vhci_create_device+0x2c8/0x5c0 [ 2022.440202] vhci_open_timeout+0x38/0x50 [ 2022.440790] process_one_work+0x9a9/0x14b0 [ 2022.441418] worker_thread+0x61d/0x1310 [ 2022.441996] kthread+0x38f/0x470 [ 2022.442497] ret_from_fork+0x22/0x30 [ 2022.443030] [ 2022.443030] -> #1 (&data->open_mutex){+.+.}-{3:3}: [ 2022.443860] __mutex_lock+0x13d/0x10b0 [ 2022.444424] vhci_send_frame+0x63/0xa0 [ 2022.445097] hci_send_frame+0x1b9/0x320 [ 2022.445672] hci_tx_work+0xfb4/0x15d0 [ 2022.446231] process_one_work+0x9a9/0x14b0 [ 2022.446846] worker_thread+0x61d/0x1310 [ 2022.447421] kthread+0x38f/0x470 [ 2022.447927] ret_from_fork+0x22/0x30 [ 2022.448457] [ 2022.448457] -> #0 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2022.449492] __lock_acquire+0x29e7/0x5b00 [ 2022.450096] lock_acquire+0x197/0x470 [ 2022.450646] __flush_work+0x105/0xa90 [ 2022.451203] hci_dev_do_close+0x131/0x1240 [ 2022.451812] hci_rfkill_set_block+0x166/0x1a0 [ 2022.452456] rfkill_set_block+0x1fd/0x540 [ 2022.453066] rfkill_fop_write+0x253/0x4b0 [ 2022.453667] vfs_write+0x29a/0xb10 [ 2022.454189] ksys_write+0x1f6/0x260 [ 2022.454726] do_syscall_64+0x33/0x40 [ 2022.455262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.455989] [ 2022.455989] other info that might help us debug this: [ 2022.455989] [ 2022.457364] Chain exists of: [ 2022.457364] (work_completion)(&hdev->tx_work) --> rfkill_global_mutex --> &hdev->req_lock [ 2022.457364] [ 2022.459001] Possible unsafe locking scenario: [ 2022.459001] [ 2022.459744] CPU0 CPU1 [ 2022.460332] ---- ---- [ 2022.460942] lock(&hdev->req_lock); [ 2022.461435] lock(rfkill_global_mutex); [ 2022.462287] lock(&hdev->req_lock); [ 2022.463082] lock((work_completion)(&hdev->tx_work)); [ 2022.463756] [ 2022.463756] *** DEADLOCK *** [ 2022.463756] [ 2022.464529] 2 locks held by syz-executor.4/26029: [ 2022.465162] #0: ffffffff8561e288 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2022.466373] #1: ffff88800e748f40 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0xef/0x1240 [ 2022.467535] [ 2022.467535] stack backtrace: [ 2022.468113] CPU: 1 PID: 26029 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2022.470204] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2022.471269] Call Trace: [ 2022.471619] dump_stack+0x107/0x167 [ 2022.472092] check_noncircular+0x263/0x2e0 [ 2022.472636] ? register_lock_class+0xbb/0x17b0 [ 2022.473241] ? print_circular_bug+0x470/0x470 [ 2022.473835] ? stack_trace_consume_entry+0x160/0x160 [ 2022.474492] ? alloc_chain_hlocks+0x342/0x5a0 [ 2022.475077] __lock_acquire+0x29e7/0x5b00 [ 2022.475617] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.476298] ? rwlock_bug.part.0+0x90/0x90 [ 2022.476849] lock_acquire+0x197/0x470 [ 2022.477413] ? __flush_work+0xdd/0xa90 [ 2022.477915] ? lock_release+0x680/0x680 [ 2022.478434] ? lock_release+0x680/0x680 [ 2022.478949] ? lock_chain_count+0x20/0x20 [ 2022.479496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2022.480171] ? lock_chain_count+0x20/0x20 [ 2022.480710] ? lock_acquire+0x197/0x470 [ 2022.481446] __flush_work+0x105/0xa90 [ 2022.481936] ? __flush_work+0xdd/0xa90 [ 2022.482445] ? queue_delayed_work_on+0xe0/0xe0 [ 2022.483032] ? hci_dev_do_close+0xef/0x1240 [ 2022.483601] ? __cancel_work_timer+0x2a9/0x4c0 [ 2022.484193] ? mutex_lock_io_nested+0xf30/0xf30 [ 2022.484798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.485494] ? __cancel_work+0x250/0x2b0 [ 2022.486027] ? trace_hardirqs_on+0x5b/0x180 [ 2022.486587] ? __cancel_work+0x1bb/0x2b0 [ 2022.487115] ? try_to_grab_pending+0xe0/0xe0 [ 2022.487684] hci_dev_do_close+0x131/0x1240 [ 2022.488231] ? rfkill_set_block+0x18f/0x540 [ 2022.488792] ? hci_dev_open+0x350/0x350 [ 2022.490493] ? mark_held_locks+0x9e/0xe0 [ 2022.491021] hci_rfkill_set_block+0x166/0x1a0 [ 2022.491613] ? hci_power_off+0x20/0x20 [ 2022.492120] rfkill_set_block+0x1fd/0x540 [ 2022.492664] rfkill_fop_write+0x253/0x4b0 [ 2022.493219] ? rfkill_sync_work+0xa0/0xa0 [ 2022.493761] ? security_file_permission+0xb1/0xe0 [ 2022.494390] ? rfkill_sync_work+0xa0/0xa0 [ 2022.494925] vfs_write+0x29a/0xb10 [ 2022.495396] ksys_write+0x1f6/0x260 [ 2022.495881] ? __ia32_sys_read+0xb0/0xb0 [ 2022.496407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2022.497101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2022.497760] do_syscall_64+0x33/0x40 [ 2022.498242] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2022.498909] RIP: 0033:0x7f89a3317b19 [ 2022.499404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2022.501878] RSP: 002b:00007f89a088d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2022.502870] RAX: ffffffffffffffda RBX: 00007f89a342af60 RCX: 00007f89a3317b19 [ 2022.503799] RDX: 0000000000000078 RSI: 0000000020000140 RDI: 0000000000000003 [ 2022.504725] RBP: 00007f89a3371f6d R08: 0000000000000000 R09: 0000000000000000 [ 2022.505846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2022.506763] R13: 00007ffc507cacbf R14: 00007f89a088d300 R15: 0000000000022000 05:56:36 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40}, [{}]}, 0x78) 05:56:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20000238, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:56:36 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x110, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) io_uring_enter(r0, 0x38a, 0x9196, 0x0, &(0x7f0000000180), 0x8) 05:56:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x4, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:36 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3876, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x6, 0x0, r3, 0x80, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x32, 0x9196, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff79, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x2801, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10}]}, 0x2c}}, 0x0) 05:56:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x3, '802.15.4 MAC\x00'}]}, 0x40}}, 0x0) 05:56:36 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 05:56:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x200002f8, r1, 0x1, 0x0, 0x0, {0x1, 0x0, 0x500}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x38}}, 0x0) 05:56:36 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x141105, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x40}, [{}]}, 0x78) [ 2032.481496] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 2032.492786] netlink: 'syz-executor.3': attribute type 3 has an invalid length. VM DIAGNOSIS: 05:56:27 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=0000000000000001 RCX=ffffffff81d3f2ce RDX=0000000000000000 RSI=ffff88800b9a4ec0 RDI=0000000000000005 RBP=ffff88801d664d08 RSP=ffff888019dcfa78 R8 =0000000000000001 R9 =ffffffff850dec27 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88800b9a4ec0 RIP=ffffffff8140b6a8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fc07b5b08c0 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b391150a48 CR3=000000000d73a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=7269762f736563697665642f7379732f XMM03=2f6b636f6c622f6c6175747269762f73 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055b3910f00d0000055b391126d40 XMM06=000055b3910fa0800000000000000000 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822dccb1 RDI=ffffffff879f1140 RBP=ffffffff879f1100 RSP=ffff88804a7e7168 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000032 R13=0000000000000032 R14=ffffffff879f1100 R15=dffffc0000000000 RIP=ffffffff822dcd08 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f89a088d700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a763f2aa50 CR3=0000000020320000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000