0000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c03, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1d, 0x5, "7433f7ae2a1a13de04add79767bacd4c5b5e6a2aa456bca04d1a86584269f53f3245af6b1e718a6f16e246ecd58536df65d9ba3f788938250b917d3a7a3b9012", "bb27c53b1e726e690fd36931fd5d3fc82165c0fb5da998783ccdf7c0d88bffc1"}) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x0, 0x25d9e0df886c309, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x8, 0x9}, 0x4, 0x80000000, 0x9, 0x0, 0x25b, 0x800000, 0x4, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r1, 0x3) rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000600)) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:03 executing program 5: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 00:18:04 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/256, 0x100}], 0x1, 0x3c, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) fsmount(r2, 0x1, 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) setresuid(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) fchownat(r3, &(0x7f0000000300)='./file0\x00', 0x0, 0xee00, 0x0) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617073686f74002c6e616d653d68756765746c622c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636cdfe7af084ab5f43bf36f6e655f6365746c622c66736e616d653d2f6465762f7a65726f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e282c00c01bb33846a64ba66b96d1f8bafc523e011c45bb8386b1254b86bb32f5b5b695499776"]) 00:18:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9e1) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x6) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000003c0)="397f4ca783eed7b13f278588a567686d7534b5bdb7b4965e3ea0fb34d6409bb9f5599451e1f1b33c899390c1edc3ee2d016ea856904a934c0701fc297d58f7019497a8d085747c61029b7d1eee5dfed1c649ebd9159e687a4fbfabd94288e5080de6a1d5f6fe2bd3350d8374cd58879290eee56c370467b4320ab42c0a648acfdebef701c0ea7900605855052dbae07b8f6d58eece0fe539f4", 0x99, 0x2, 0x0, 0x3, r6}, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$tun(r4, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x8, 0x0, 0x3, 0x4}, @mpls={[{0x512c, 0x0, 0x1}, {0x28f1}, {0xfbb6, 0x0, 0x1}, {0x81}], @ipv4=@tipc={{0x1f, 0x4, 0x3, 0x3, 0xa6, 0x65, 0x0, 0x20, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0x4, [{@broadcast, 0x40}, {@private=0xa010102, 0x4}]}, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x3, [{@local, 0x5}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x253}, {@empty, 0x7}, {@remote, 0x8}, {@multicast2, 0x400}, {@private=0xa010102, 0xdf6c}, {@rand_addr=0x64010100, 0xfff}, {@loopback, 0x80000000}]}, @end]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1, 0x0, 0x0, 0x7, 0x3, 0x2, 0x0, 0x9, 0x1, 0x4e22, 0x4e23}, 0x2, 0x4}}}, [0x0, 0x0]}}}}, 0xc0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x41810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000000), 0x9) 00:18:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:04 executing program 5: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:04 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x0, 0x0, 0xa6219d3}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=[@hopopts_2292={{0x11}}, @hopopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="58010000100000040000000000000000fe8000000000000000000000000000aa0a01010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000340), 0x100) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x8e60, 0x4) 00:18:04 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c03, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1d, 0x5, "7433f7ae2a1a13de04add79767bacd4c5b5e6a2aa456bca04d1a86584269f53f3245af6b1e718a6f16e246ecd58536df65d9ba3f788938250b917d3a7a3b9012", "bb27c53b1e726e690fd36931fd5d3fc82165c0fb5da998783ccdf7c0d88bffc1"}) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x0, 0x25d9e0df886c309, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x8, 0x9}, 0x4, 0x80000000, 0x9, 0x0, 0x25b, 0x800000, 0x4, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r1, 0x3) rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000600)) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 1084.199458] cgroup: Invalid name 00:18:04 executing program 5: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:04 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x2000, 0x0, 0x0) 00:18:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9e1) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x6) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000003c0)="397f4ca783eed7b13f278588a567686d7534b5bdb7b4965e3ea0fb34d6409bb9f5599451e1f1b33c899390c1edc3ee2d016ea856904a934c0701fc297d58f7019497a8d085747c61029b7d1eee5dfed1c649ebd9159e687a4fbfabd94288e5080de6a1d5f6fe2bd3350d8374cd58879290eee56c370467b4320ab42c0a648acfdebef701c0ea7900605855052dbae07b8f6d58eece0fe539f4", 0x99, 0x2, 0x0, 0x3, r6}, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$tun(r4, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x8, 0x0, 0x3, 0x4}, @mpls={[{0x512c, 0x0, 0x1}, {0x28f1}, {0xfbb6, 0x0, 0x1}, {0x81}], @ipv4=@tipc={{0x1f, 0x4, 0x3, 0x3, 0xa6, 0x65, 0x0, 0x20, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0x4, [{@broadcast, 0x40}, {@private=0xa010102, 0x4}]}, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x3, [{@local, 0x5}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x253}, {@empty, 0x7}, {@remote, 0x8}, {@multicast2, 0x400}, {@private=0xa010102, 0xdf6c}, {@rand_addr=0x64010100, 0xfff}, {@loopback, 0x80000000}]}, @end]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1, 0x0, 0x0, 0x7, 0x3, 0x2, 0x0, 0x9, 0x1, 0x4e22, 0x4e23}, 0x2, 0x4}}}, [0x0, 0x0]}}}}, 0xc0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x41810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000000), 0x9) 00:18:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 00:18:04 executing program 0: msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f00000002c0)={0x2, "e684f8a86804c04ca73eb3c3fb3ac5b47df470f475eacf40378b1bf5ddfadb87a57c6eabc99216163a82a5688393c7eddf5e44a95ba39b75394925fd7b1afa1c6c0dd20563852ee6b05ce29b93d3a153b42420d841f49e0ffe5df3354384edb28fbf262993f97924b7079e40840245ee2479da27b9830efb6d59470b609c7f65e1bd54f2b7f5e41585a80e7646aa0ec44609a47eaaf944c51cd3842380dd96f29087b81e8faa5e4360b866037a3dafafe5013631c995d52f30f401d134bc21836efe357af93647419cb0d724cb08619d8155f509a3639a084f44d3516b3aacebe6bef34a6c9d42d05ebee19532a8"}, 0xf6, 0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r3}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r7}) 00:18:04 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c03, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1d, 0x5, "7433f7ae2a1a13de04add79767bacd4c5b5e6a2aa456bca04d1a86584269f53f3245af6b1e718a6f16e246ecd58536df65d9ba3f788938250b917d3a7a3b9012", "bb27c53b1e726e690fd36931fd5d3fc82165c0fb5da998783ccdf7c0d88bffc1"}) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x0, 0x25d9e0df886c309, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x8, 0x9}, 0x4, 0x80000000, 0x9, 0x0, 0x25b, 0x800000, 0x4, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r1, 0x3) rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000600)) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x38, 0x3a, 0x0, @empty, @mcast2, {[@fragment={0x2b, 0x0, 0x1, 0x0, 0x0, 0x2, 0x65}], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "550365", 0x0, 0x0, 0x0, @empty, @private0}}}}}}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000600)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa0743, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9e1) renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x6) r4 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x48, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}}, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3ff, 0xffffffffffffffff, &(0x7f00000003c0)="397f4ca783eed7b13f278588a567686d7534b5bdb7b4965e3ea0fb34d6409bb9f5599451e1f1b33c899390c1edc3ee2d016ea856904a934c0701fc297d58f7019497a8d085747c61029b7d1eee5dfed1c649ebd9159e687a4fbfabd94288e5080de6a1d5f6fe2bd3350d8374cd58879290eee56c370467b4320ab42c0a648acfdebef701c0ea7900605855052dbae07b8f6d58eece0fe539f4", 0x99, 0x2, 0x0, 0x3, r6}, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$tun(r4, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x8, 0x0, 0x3, 0x4}, @mpls={[{0x512c, 0x0, 0x1}, {0x28f1}, {0xfbb6, 0x0, 0x1}, {0x81}], @ipv4=@tipc={{0x1f, 0x4, 0x3, 0x3, 0xa6, 0x65, 0x0, 0x20, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0x4, [{@broadcast, 0x40}, {@private=0xa010102, 0x4}]}, @timestamp_addr={0x44, 0x4c, 0x66, 0x1, 0x3, [{@local, 0x5}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x253}, {@empty, 0x7}, {@remote, 0x8}, {@multicast2, 0x400}, {@private=0xa010102, 0xdf6c}, {@rand_addr=0x64010100, 0xfff}, {@loopback, 0x80000000}]}, @end]}}, @payload_named={{{{{0x2a, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x1, 0x0, 0x0, 0x7, 0x3, 0x2, 0x0, 0x9, 0x1, 0x4e22, 0x4e23}, 0x2, 0x4}}}, [0x0, 0x0]}}}}, 0xc0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x41810, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r7, &(0x7f0000000000), 0x9) [ 1084.708078] Bluetooth: hci0: command 0x041f tx timeout 00:18:05 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="f606d78a32657ad28cdb9956d037c854111ba02b87e31b9115b1233028b3f27e06000000000000007fe2b5eeabfed09846ba1f47450681fd75172fdefd9fd172634eb7236dd23f0531101a563f8f487f677d9941eacfc29e596d9cea5f12baba48868ebed288e613ba9bc2a9ad56125703c55bf8b8a3421da3490b7b2d4ed82f4013b6884fb55a5f112f27db54a0efdc034c66c6bfec991afeb00b7c54d88b94c1ab9ed790390c621f766cd58e4934bbc97e81a5f64682febcf9d9805f9778f80fd5"], 0xfdef) io_destroy(0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8140000120002002cbd7000fbdbdf251800000092140c800400000010d3aeb5224e227974b3ed5ee766d61336753933c496ec21b3b988f8f7ed1e17e27aa82809aa783830ae7f15be438f464fbb9e22a9842bb3f248f18084ceb786b1fd872ba167f1affd4dcb0505f2d1433e5683e8ca9b622242130b3123a2906068dc368a12714a45b8b97c0848ff7c57101323579aa7b103c4acf56e4c85c59818714fbd817b5a3f30bf48397f19b527bd72dc33b0fe632f85fc75f11315b14b2adb9f3d889873c97d85c75cf8f8677ddfe0ebfe56c0ca264948680f9889124194d8cc5259645a1d6368c151a4fcb85a60058ff91694183822c22c2476935d9e39130eb1befa35a1a86dab467a5c575dffe34a854213a1668606ff08d64674af68c2a0f8573472d6c44725c4e0e7fbe0edad8d146066805cd0d1313018850b003a0fd4a980c54fc0020eaeaa6111e02f41fcddc547da8c5b3fe02910122170863a17fc69e10fcb764b1444da4ddae3972d02a62912a2c05f7baae60df06fb7de8f86f4505f5fd14c1b9053807fb5ea8a7b90ebda04ce5441e62b71cb4791314e1d94f86c1a5d77c15406263d76d09b05a84577df6231b4b53b37f4a9c9e09e1d80b67da3d938141d6001fe5e84d9da341528f298c1d17b718cd2f229f72a2b59b3aa4b4b79161024b1ac337a3fc9f230cc52a35b1caa0528ae3bd0e4ab2c4fe6008b0028d0072665efa3e6e537e31aa79eb3718ae38ba810208a3bea9864e0ed444644914681e0de3c7fbc0c0be5bb42da2c08c7588d232c08d494d19fb65fcec585a60889b65c2f627f6dec0d8c7663d548c046f03ed5763b790c36e85c29ef250b3543ff8a262c6cea82825df9db931f6ca35be8f38f70280610a2b69488fa089672b1202041b506a4ff43407d48574cf064fe0bfca9886063c3ab3f6befc4ac2c002abab81a023053f8a2c0ab5f634ef74523beadee7457c6a7103727ddb0fdb9ba2e0838e8206487e71c189fe5ed44454003915fc6610f6546867337507a4e83b98c4f00005a5c4e10260b7f713772cc92b118b0b247ace28cdcf33fa7c8f0f8a11d0883b2616686c0946ee43ff7d91b3202042c2b7e5901609f6efaab6af1606b89fc1fe0fbb5bfad285653decda48815b9ab8fd82167284823042bd00480b3ed29bc02ea28e9d7d821fbe9fc3a6627f06f3e143e6722af35e40e1cc31d9e4d3db9c1c0bc20d74fe330ef2de27bb8aff3e9cc65d7175db42e4e6ae4b4c920c9da8b5116b49eb717fa0857d967a3e238a54cb540b3d4ecc14298174ffe12a96c0d8ab8a25fa07186457b1fec0d293bcdda8a896b6bf40ba1ba2ada9a0c8afd0c88d20b85c94e3a4aca9d0f7864a13bf9a79ffef40edb6c78fed593831015b1ec8bf531607705a5bb34af2b5796db6a596b17ecc777ac87e760859874e99c2db6c1f629270f1341912e769c72bad9403a89392f0440bed4b1cee63e555ef50c361a551d161ad2dc10fbcd9e93e98b96e3afc92c472ed5be4d07001248e35208e978e17c7d84d34e4cb266a1e82bdf3d2a2005426381d0cc4ddd12cc418d8cdf1224fa754b3c56d39780a6a6a8465e5e43fcaa5485b83c277633be28fd988d30698972e2fc18f7087a72ab0d5644f6e35fe5e7535416e6bf8efde2f15a3e6808cb222dc161632518e0d895ef517fe34803c5d848fd9b766a87552f0cb462f946750cedc8ede735da977df5f57d8d7cb0d81c287fe2c245d334822a84c17dafad44fe374f59b4d04ba69f5ee18f2c997614af37349d503cb2d1bc5f69e372990cbe510ed79726dafb7f2d844445635df3f45dd12d5105bf11fb4c5c7fd55adb3ec722a552cee92e0219f2d1779d1bc005727da1c85567952060ca871ce8cdf4d919d70a267b5755e13dbe3e73deda946ab99cbf8e5e0a60c68df47a57998a49e8c0dd826cc923153eb18dd5ebe8738f910c3ea25376acdcc4ce43eb980714d05a7d24f75f1333e0927b550163b1125138bf41abda0b453cfb344a772cc0446db2e54a0ed02b2d38e1a98a3848184aada61c0a8a4f7096473435a3f5333d8f38a409bfe6b097e0cb659869d0e7bba74bc6ac4c234a7d1c35a0be4b4715be5818cec78cbbe096dccb9cac9c260cbc67c964eef8d223109b4ce79aa5b1074d9db752187350a9bbe3cc5c9fdee59a36befd23772a451a795250b4958bb78250cd366979bdac0b771ba3cf895fed98787cf9d932d6fe11cbcda06962ef865588b2ccad9068ae02405b0c51550ff5dfb3c4384d4530c4d19d27de3c41c256b35c7a084b2cafc6e79d724cf2f50391ec1273ca8471fa0c86ad87f8c70d97cb2a4add80c5ab625cb96e4888edbf9be27e8192aab30a47503f8ee8f12e9a7c674946031b3bb0a1bd285ede9388ae9beb6058a08198d2eb8c7152fbfa86bfbb5779d5a52abfcb167fd68cc669deb5db499e7a9bed7ba0b4136b68d40842985792cd8049d7b44f1e2f20637424b0136a589e59b43c77b3aedf0ff67c9c5a9a8f8d804a256f95871bb9338636b42dbf2f94038731e6ba17f0bb4d44314d53b1ceeb99fc3005722f64f23301af2ce8328a81350fcc7e0e85a23c8ecebdeed851b4e4af15272a3dd8692557c69b184708c1d016822128e15cc89d4b527c0dde0db579d9514dd1f79f53085cf778225d6ac6069c16b96efda9fedd17ec5d83473f51826646edb192a6164cdb70dc8a12badf0e69460ae2f3424d2ab1210469e9b846b8cb4b766cc38a146dcb96e3c92eedd9ef4524db6ed5d7702f1c32bfa4207c29f285eaa188427555585595683aab1394a740ed653637fe6e6af582698b3822a07450b24af66ba09814269f4966849899ba43e0d28297f6faf83a659f7058fb8a9619e2c76721c1c27f0b3d2f5e45e5d2d7a6cbf8cb8c9f126a2acacd6ae9d0b563d192bfd5ef7afea1532d0f96e6bd82b6a64148f6b1be52af6f4f374feb3379a03f8e279a469b4082d36a9a599b7477c0a116df8c1835aa8d36f31382b2edbac91eb339734154ad71582e1fd9acbcf34faf974e704821e46d82ae482cb8e92148566a4c23e8ba550a5533902c0da72deafbe340c7e368a42818a81145ed014034971c12b7735bf14f6b0d2d55bff8ad266c9083c3b2f44fe50bf374200bf1438c4bc02c269a849d58cd8e7fb299240d1505f8b525fa3c82dc06dd8e2f4742dfbef21e6d2be2995a27d83e0b574ad3051ef6e35dfd00b3f0d7a30f9077010000e30146fc0e3338b4235718f9281ef4e7ebefb964603a0d4e34d20638b51d013c4cad4bf6b896a21ee9f7f034ac1fc51953dd6d7f3b76a48e6a092735522f3d4f5037f018fd46d0ed7312e474e862558b18faf4ca9f4ef47b50795006f4f32a02f80bc685741433efde146ca74042e281bd505099f48b3210fab5897c728a7ba88c4ce09cc0a0ad13186f31db305f436a575723e95ba88af7e3d81221687ec18cdc00230d7e9f4d8efceeb3c1594daed256b7b844f4143bf93da2e81b0b6374718777b9617a6205fcabdd8316d28ad1f8e0a3052e29cf9862b5452b12c6f1eba7745cf3aa47cc10895d4ce268a0e926514804fc00616e30c40c48dca8f40f918cd06a6c4f21881521bc6d87d8bf64daf04607dcb4d1e6a368d05617bd1aa547e66cd69042a6d68f65a4c93a41e3c8b1a97d3913822db6040d146c607c6ccfbf396a062864ebdb0eb9b509528eb9ebc8f793300a72aff341c828d8b254cde3edeca5fac15ceb601074868ea8ae4cd9c602a8c403921214279e19a8e1d79110f746534f0f25896e8ad36327c52063300d324fce94d64e7ff35c8368a781c664d8e3aae57ebe2ff6e90dcb4e726bbdddf6822df2dfb026b44adac4ef013674460877f109f02c8648c1ad526cc1c1c8c856c4211ec52aaa9c47737e5a26b0cebbac194f4af02816e424a3b7e8d557206e1ed6a3579dbb8daf7139a1065e2855a22a5be86417b474bd607f2f19763268edbcb7f861ee2f0115d7fb2cafe2a7e3b0a8673b0633024f5684fc365fd5c9563eb35dec658bb63ce3586b6b8258698826a8709b9ba73e65c7102ce55377b7c640d4de2f4d6426659ecce65cc499c98fbaebacf8da2d18a5e8a7642040d1da73c1cad9db5e5f2296f9af44468dc65dcc4e1612b0f4babb28b43310950add8ef6562a4b24c1cf4b9c2dfcf4dc8a5d184fa0805d6a3fe6911d1e6d666e68dc8fe41cf0f0de9faf1d0c24713a861c55665fe7dfee8df37854c55aa329ee3197417857c8c5c741a3e4b8b859bb63dce9344c4370e31001bb86cb57b060e3b035560f1226047172334bd1a1dc077bca0a3ed6e2fafad6c6651b5adb3e6d2755c7b77504758012a1a90bc9b0b69e2218348196dc5f442eb2c26992071282d9b0c5b432b4a8880a41345dd2e8b93a4161729cbb42e627badf0fd2834c6cb6b84eeaf853af78f075989c08ad958b1d75c2fc6cc758cca5489b9d85ae7abf8854e39c582e6aaa31b3d58efeff495178bb37fdec80bba836af6ca006f8265e540e80ceaa267df7934bc376e8712dc1487df686495db69094524c25ba27abe6b1fd2f1817031898138e74b296855ee7953f21bdaa72d20895eba0fb9b7e1d98f8c92ecaa14025ea88b290858a69dbf8bdd2d00828526f9d1b14d7672c53428bbce328fc4c645976c0b2a5d80905beb434c88a31fcbae8f6d0e9f0316242bbaea755ee36c71bcc6428edb6778bcfa5b5035c298b3cfd7d7b668a03ce2f548a5d080ae3d9fc4aeca18162f4dd6d05da7b91ddff609470dfcef7d3fb694b42f68b702217b9920bd918897f579a9d82f4860dbc17763f9a7e0b61558c4c10c50d15bb36ebf4645a830fc50637cb9e9b8676eb38368b8009d6d1e637e7d7de55844687d79000542a3318949c3a23dce95091cad666ea57d0ceee932ef202dcaf825aa79cf4ae4d893295c0e1b6728a58f391437597f8a8d1eec491edbb8d577f2dc307d511fb316b3cabe4f34ac291952e61df85908c97f056379b7c6d4cae3f9cfd8ec8af5fff7f7cbac2dde423035a4f37674740404cede5b7e1ff9837f5287225239ca5191518aad9d46f990e3d87b4f634c3ab5595affbbaf21c650a3ce573cea434f36b0393c64343a82de887e7ae46c0e4f4172640bad0b2831e7ba8c4b53a5e4112556fa696e33f6a07463aec1efe073b2d558f7406d4ef50e472f578c061ad6384ceec4410fe1d02fe9816c07bab37d36a6c8a41bac73e78c9a05ea6ad094f9bfeebbd35b15fdc276c44aac60ebe87e94a2cbc97115bd274ac0ca62955074a18c05e3e0749bf632bcafaaf713a9fcf69986175a556d7de5c7e3c2105177ce52612ef27127b2077677cb98da1d1a57e3ed3fd7bec13735a519350bab8f3826f60543ab315e8e9835ef355bedc00e47a854ef8bdb510100c0e029e4aae400134966057446486f94555b12fbc540f086444594f8be7213fc4746a358d5a20acbf638e4c95bb9a836d83a2ef7329de30a0753c1cbd7331e1581b0f593bc9726b2ae9e1417c80b67a82575b28806779e902e8730f10579c67cd2f9b6a88f69ac654f571f4705bd92ec1a5c870429a2ec3bed7eec1cc6abf768921d12eeda01d84b61bac67b777e23b2a335536a538213ee64efc935c9d03a932d790b787a0517fe09ea2dc3895af9bda2a0e498f9aaf63c4618e00f9bc12aa14f078dbc0bd87f6d5ba5dfdbbf9b51bdd15281dd7a77b03b41cb192f9fde461575e3e5a0f11e7587d0f3f2828af05a8109474703a0b4abe58d64bac0b81037b187561cf054036a8806f339c82ef4bd0f2c3818df73e408476cb8f0829332918e700e309afea1816de75408abac89305330f36fccabbbcff324ff0263decf335ffdacf502e10266df950d43c9b392ef3bf3c3e12b38a01dab26a2a2d2f6237977a1b8f5150f38c9c86a8028927bb3171d6663dd9f13ceccf8aff4b07a46c15cb4a27b00456b569d3f8b242f25592ad031eb60958159be7de68ab33d3a7724894be49aefefb5b738080f8a46b39f3804214391ecba3a69e58ba0df431523e6a9eebbf9c04c24ffc5dc649307a4409bb30ad13888e9b3b69bec94027e83e75c1f494a6b586c384b0ca9fb3086fc7ab5dc189c4a3e8211dcf6f42c73cfbbf390ad81cbca11a99901294d619358ab3544166a7e370114140e0051119d0a842d8c7292d70ffa2920fba25aa89bbb71ba453a07f64ba71ab808f9755b172bc77ce3bed56c760f0b4be3e2c60868aa33b25d67694f3308d2d2ff5a1f2474891f2ac493b02c1db89c1f48c357112c26e91b55b7ced2c4b4ba560fbf0e0e0f78d7149fbf5e5419cca3411e9ab32194ce1c33eef824fec16232d34e60a4835ceff658674051e2e104422880611c749ecaf535eeccbec1a712f6574447668f407b4c3d65a4d72afa4a7c13e6cf34e2c02658c2b6c2c44b32fdf9ef113bb34b50afde4048045517e41752fb9c01fda76a7de6021b1ec28e9dc5bbfe5c396189b46650ccb5490991a7c2b89729db00ee4a474916fd4e4022b0630b549f4d6f665192e47c6fe565620be30cec836b6bf6f16c1a2f8f4a53e558ed64a0e126f425b1bb4b5ff06aaffbebec98293d90da695d99a6b7c764b82cb379afcfe7c9702ab3296043ea1efecf6c235ce63d7761026e4ca813d7d3cfe834fd2c701780200011beba1bacd437dd136fa36bd76d965216bb156044e2e051c3e6786f0101bfb223f89cdb674ef5d1e3d443453a2e05a1d716a39947933425d41c4cf2363b87cf2761b128bf667e67b6bc222f110cb1e6b7d2f6ff44831b4b08895e4ae0df7f29933a6d1a2f7b753f4b8859508c40b6d77a75f9092079ffb5ad65711179829ca0d494e50a8b67035d6e8d7b63265448fbd0780588d0e68cab8e620d128cb57bd0215f6b2fc0dc0a49f2fc880b2a6bb1f26df5e3802f6ac69dfaf5a6c3787fff6e758550263ec884bf4dc525bfad8b2224acbe35f12c1906fa3a7dfe751021bd5e29199d37654930824e6d12a0e9353b03735e6eb66a549d25c070475ae68e98fe1ce26a24866aaacfe26e2e18127238cbcb93690f45b4da73742e17ac654cc8bd8dde28092f2a5f6660df325c41c71a186c67bafa32d08e28dac6a7429f59527a2ae631683cf7bf51de602b85b58d5cb3e6008d16d08e39332c711221ee1f1ab15f9ef786aea2e732900420046a46917e5ba7c120c403b770de5049726cd0c9ff9df17286073b6bd9dad3d73a28aa7064d00000071cb56b2db80186e5fa85e3e1b1984c068a2221f285173d37eceb9936ddb702a23c462b948482aab55df142c5761759ec6b876b34f1571284f9b381e91f14e68afd7aeb4a25baaebce3052850110ff7a572208a85b56be0e559c1b1fe489b8c9667cace9bcfc6a918dd6ccac642859a66d701e96eda5ff3bd470f0f4f0697fa7706e36979f5b0b6601c47453d3fb616572495ef6de75710c003b003a580000000000000000"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001e00)=@updsa={0x228, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @algo_auth_trunc={0xeb, 0x14, {{'wp512-generic\x00'}, 0x4f8, 0x200, "f1c47a7c0ffee2018b7717c91e7ce0171e69e2e723a523a67ab4957d4c778b1e35a3de3eae8a9fadc05448cc18bed3a8043c691af81cc63e83cf616288a1c7cee2eb701005af0a5516324d64da21751c4855730284011fb93eaf9e8ebcec1082d1fb16e2c3e66c9570c4f105523884aff5ca87150778c5576beb813a78d188a72a0f69a8f8d5ec2653e2bd7618433be1d77cb090ebffbe89f18109f0069ebf"}}]}, 0x228}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x0, 0x8000008000) 00:18:05 executing program 6: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 00:18:05 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/205, 0xcd}], 0x1) 00:18:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x7fff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000480)) 00:18:05 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) timer_gettime(0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c03, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1d, 0x5, "7433f7ae2a1a13de04add79767bacd4c5b5e6a2aa456bca04d1a86584269f53f3245af6b1e718a6f16e246ecd58536df65d9ba3f788938250b917d3a7a3b9012", "bb27c53b1e726e690fd36931fd5d3fc82165c0fb5da998783ccdf7c0d88bffc1"}) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x2, 0x8, 0x1, 0x6, 0x0, 0x3, 0x0, 0x25d9e0df886c309, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x1, @perf_config_ext={0x8, 0x9}, 0x4, 0x80000000, 0x9, 0x0, 0x25b, 0x800000, 0x4, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x7, r1, 0x3) rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000600)) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x2000, 0x0, 0x0) 00:18:05 executing program 0: setns(0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x5c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x7, 0x0, 0x0, 0x0, @str='!-\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="bb"}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x66}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x12}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4814) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad86393eddf18f6}, 0x81) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x20000000) [ 1085.247417] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.279544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=404550 comm=syz-executor.0 00:18:05 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x1992, 0x0, 0x0, 0x0, 0x0) 00:18:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x7fff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000480)) 00:18:05 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="f606d78a32657ad28cdb9956d037c854111ba02b87e31b9115b1233028b3f27e06000000000000007fe2b5eeabfed09846ba1f47450681fd75172fdefd9fd172634eb7236dd23f0531101a563f8f487f677d9941eacfc29e596d9cea5f12baba48868ebed288e613ba9bc2a9ad56125703c55bf8b8a3421da3490b7b2d4ed82f4013b6884fb55a5f112f27db54a0efdc034c66c6bfec991afeb00b7c54d88b94c1ab9ed790390c621f766cd58e4934bbc97e81a5f64682febcf9d9805f9778f80fd5"], 0xfdef) io_destroy(0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001e00)=@updsa={0x228, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @algo_auth_trunc={0xeb, 0x14, {{'wp512-generic\x00'}, 0x4f8, 0x200, "f1c47a7c0ffee2018b7717c91e7ce0171e69e2e723a523a67ab4957d4c778b1e35a3de3eae8a9fadc05448cc18bed3a8043c691af81cc63e83cf616288a1c7cee2eb701005af0a5516324d64da21751c4855730284011fb93eaf9e8ebcec1082d1fb16e2c3e66c9570c4f105523884aff5ca87150778c5576beb813a78d188a72a0f69a8f8d5ec2653e2bd7618433be1d77cb090ebffbe89f18109f0069ebf"}}]}, 0x228}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x0, 0x8000008000) 00:18:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:05 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@nested={0x6, 0x0, 0x0, 0x1, [@generic="c951"]}]}, 0x1c}}, 0x0) 00:18:05 executing program 0: setns(0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x5c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x7, 0x0, 0x0, 0x0, @str='!-\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="bb"}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x66}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x12}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4814) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad86393eddf18f6}, 0x81) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x20000000) 00:18:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x7fff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000480)) [ 1085.567963] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 00:18:05 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, 0x0, &(0x7f00000006c0), 0x91002, &(0x7f00000007c0)=ANY=[]) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 1085.599258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=405003 comm=syz-executor.0 00:18:05 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:06 executing program 0: setns(0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x5c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x7, 0x0, 0x0, 0x0, @str='!-\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="bb"}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x66}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x12}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4814) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad86393eddf18f6}, 0x81) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x20000000) 00:18:06 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x530f, &(0x7f0000000000)=@lsa) 00:18:06 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) 00:18:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x2000, 0x0, 0x0) 00:18:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x7fff) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, &(0x7f0000000480)) 00:18:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 00:18:06 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="f606d78a32657ad28cdb9956d037c854111ba02b87e31b9115b1233028b3f27e06000000000000007fe2b5eeabfed09846ba1f47450681fd75172fdefd9fd172634eb7236dd23f0531101a563f8f487f677d9941eacfc29e596d9cea5f12baba48868ebed288e613ba9bc2a9ad56125703c55bf8b8a3421da3490b7b2d4ed82f4013b6884fb55a5f112f27db54a0efdc034c66c6bfec991afeb00b7c54d88b94c1ab9ed790390c621f766cd58e4934bbc97e81a5f64682febcf9d9805f9778f80fd5"], 0xfdef) io_destroy(0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8140000120002002cbd7000fbdbdf251800000092140c800400000010d3aeb5224e227974b3ed5ee766d61336753933c496ec21b3b988f8f7ed1e17e27aa82809aa783830ae7f15be438f464fbb9e22a9842bb3f248f18084ceb786b1fd872ba167f1affd4dcb0505f2d1433e5683e8ca9b622242130b3123a2906068dc368a12714a45b8b97c0848ff7c57101323579aa7b103c4acf56e4c85c59818714fbd817b5a3f30bf48397f19b527bd72dc33b0fe632f85fc75f11315b14b2adb9f3d889873c97d85c75cf8f8677ddfe0ebfe56c0ca264948680f9889124194d8cc5259645a1d6368c151a4fcb85a60058ff91694183822c22c2476935d9e39130eb1befa35a1a86dab467a5c575dffe34a854213a1668606ff08d64674af68c2a0f8573472d6c44725c4e0e7fbe0edad8d146066805cd0d1313018850b003a0fd4a980c54fc0020eaeaa6111e02f41fcddc547da8c5b3fe02910122170863a17fc69e10fcb764b1444da4ddae3972d02a62912a2c05f7baae60df06fb7de8f86f4505f5fd14c1b9053807fb5ea8a7b90ebda04ce5441e62b71cb4791314e1d94f86c1a5d77c15406263d76d09b05a84577df6231b4b53b37f4a9c9e09e1d80b67da3d938141d6001fe5e84d9da341528f298c1d17b718cd2f229f72a2b59b3aa4b4b79161024b1ac337a3fc9f230cc52a35b1caa0528ae3bd0e4ab2c4fe6008b0028d0072665efa3e6e537e31aa79eb3718ae38ba810208a3bea9864e0ed444644914681e0de3c7fbc0c0be5bb42da2c08c7588d232c08d494d19fb65fcec585a60889b65c2f627f6dec0d8c7663d548c046f03ed5763b790c36e85c29ef250b3543ff8a262c6cea82825df9db931f6ca35be8f38f70280610a2b69488fa089672b1202041b506a4ff43407d48574cf064fe0bfca9886063c3ab3f6befc4ac2c002abab81a023053f8a2c0ab5f634ef74523beadee7457c6a7103727ddb0fdb9ba2e0838e8206487e71c189fe5ed44454003915fc6610f6546867337507a4e83b98c4f00005a5c4e10260b7f713772cc92b118b0b247ace28cdcf33fa7c8f0f8a11d0883b2616686c0946ee43ff7d91b3202042c2b7e5901609f6efaab6af1606b89fc1fe0fbb5bfad285653decda48815b9ab8fd82167284823042bd00480b3ed29bc02ea28e9d7d821fbe9fc3a6627f06f3e143e6722af35e40e1cc31d9e4d3db9c1c0bc20d74fe330ef2de27bb8aff3e9cc65d7175db42e4e6ae4b4c920c9da8b5116b49eb717fa0857d967a3e238a54cb540b3d4ecc14298174ffe12a96c0d8ab8a25fa07186457b1fec0d293bcdda8a896b6bf40ba1ba2ada9a0c8afd0c88d20b85c94e3a4aca9d0f7864a13bf9a79ffef40edb6c78fed593831015b1ec8bf531607705a5bb34af2b5796db6a596b17ecc777ac87e760859874e99c2db6c1f629270f1341912e769c72bad9403a89392f0440bed4b1cee63e555ef50c361a551d161ad2dc10fbcd9e93e98b96e3afc92c472ed5be4d07001248e35208e978e17c7d84d34e4cb266a1e82bdf3d2a2005426381d0cc4ddd12cc418d8cdf1224fa754b3c56d39780a6a6a8465e5e43fcaa5485b83c277633be28fd988d30698972e2fc18f7087a72ab0d5644f6e35fe5e7535416e6bf8efde2f15a3e6808cb222dc161632518e0d895ef517fe34803c5d848fd9b766a87552f0cb462f946750cedc8ede735da977df5f57d8d7cb0d81c287fe2c245d334822a84c17dafad44fe374f59b4d04ba69f5ee18f2c997614af37349d503cb2d1bc5f69e372990cbe510ed79726dafb7f2d844445635df3f45dd12d5105bf11fb4c5c7fd55adb3ec722a552cee92e0219f2d1779d1bc005727da1c85567952060ca871ce8cdf4d919d70a267b5755e13dbe3e73deda946ab99cbf8e5e0a60c68df47a57998a49e8c0dd826cc923153eb18dd5ebe8738f910c3ea25376acdcc4ce43eb980714d05a7d24f75f1333e0927b550163b1125138bf41abda0b453cfb344a772cc0446db2e54a0ed02b2d38e1a98a3848184aada61c0a8a4f7096473435a3f5333d8f38a409bfe6b097e0cb659869d0e7bba74bc6ac4c234a7d1c35a0be4b4715be5818cec78cbbe096dccb9cac9c260cbc67c964eef8d223109b4ce79aa5b1074d9db752187350a9bbe3cc5c9fdee59a36befd23772a451a795250b4958bb78250cd366979bdac0b771ba3cf895fed98787cf9d932d6fe11cbcda06962ef865588b2ccad9068ae02405b0c51550ff5dfb3c4384d4530c4d19d27de3c41c256b35c7a084b2cafc6e79d724cf2f50391ec1273ca8471fa0c86ad87f8c70d97cb2a4add80c5ab625cb96e4888edbf9be27e8192aab30a47503f8ee8f12e9a7c674946031b3bb0a1bd285ede9388ae9beb6058a08198d2eb8c7152fbfa86bfbb5779d5a52abfcb167fd68cc669deb5db499e7a9bed7ba0b4136b68d40842985792cd8049d7b44f1e2f20637424b0136a589e59b43c77b3aedf0ff67c9c5a9a8f8d804a256f95871bb9338636b42dbf2f94038731e6ba17f0bb4d44314d53b1ceeb99fc3005722f64f23301af2ce8328a81350fcc7e0e85a23c8ecebdeed851b4e4af15272a3dd8692557c69b184708c1d016822128e15cc89d4b527c0dde0db579d9514dd1f79f53085cf778225d6ac6069c16b96efda9fedd17ec5d83473f51826646edb192a6164cdb70dc8a12badf0e69460ae2f3424d2ab1210469e9b846b8cb4b766cc38a146dcb96e3c92eedd9ef4524db6ed5d7702f1c32bfa4207c29f285eaa188427555585595683aab1394a740ed653637fe6e6af582698b3822a07450b24af66ba09814269f4966849899ba43e0d28297f6faf83a659f7058fb8a9619e2c76721c1c27f0b3d2f5e45e5d2d7a6cbf8cb8c9f126a2acacd6ae9d0b563d192bfd5ef7afea1532d0f96e6bd82b6a64148f6b1be52af6f4f374feb3379a03f8e279a469b4082d36a9a599b7477c0a116df8c1835aa8d36f31382b2edbac91eb339734154ad71582e1fd9acbcf34faf974e704821e46d82ae482cb8e92148566a4c23e8ba550a5533902c0da72deafbe340c7e368a42818a81145ed014034971c12b7735bf14f6b0d2d55bff8ad266c9083c3b2f44fe50bf374200bf1438c4bc02c269a849d58cd8e7fb299240d1505f8b525fa3c82dc06dd8e2f4742dfbef21e6d2be2995a27d83e0b574ad3051ef6e35dfd00b3f0d7a30f9077010000e30146fc0e3338b4235718f9281ef4e7ebefb964603a0d4e34d20638b51d013c4cad4bf6b896a21ee9f7f034ac1fc51953dd6d7f3b76a48e6a092735522f3d4f5037f018fd46d0ed7312e474e862558b18faf4ca9f4ef47b50795006f4f32a02f80bc685741433efde146ca74042e281bd505099f48b3210fab5897c728a7ba88c4ce09cc0a0ad13186f31db305f436a575723e95ba88af7e3d81221687ec18cdc00230d7e9f4d8efceeb3c1594daed256b7b844f4143bf93da2e81b0b6374718777b9617a6205fcabdd8316d28ad1f8e0a3052e29cf9862b5452b12c6f1eba7745cf3aa47cc10895d4ce268a0e926514804fc00616e30c40c48dca8f40f918cd06a6c4f21881521bc6d87d8bf64daf04607dcb4d1e6a368d05617bd1aa547e66cd69042a6d68f65a4c93a41e3c8b1a97d3913822db6040d146c607c6ccfbf396a062864ebdb0eb9b509528eb9ebc8f793300a72aff341c828d8b254cde3edeca5fac15ceb601074868ea8ae4cd9c602a8c403921214279e19a8e1d79110f746534f0f25896e8ad36327c52063300d324fce94d64e7ff35c8368a781c664d8e3aae57ebe2ff6e90dcb4e726bbdddf6822df2dfb026b44adac4ef013674460877f109f02c8648c1ad526cc1c1c8c856c4211ec52aaa9c47737e5a26b0cebbac194f4af02816e424a3b7e8d557206e1ed6a3579dbb8daf7139a1065e2855a22a5be86417b474bd607f2f19763268edbcb7f861ee2f0115d7fb2cafe2a7e3b0a8673b0633024f5684fc365fd5c9563eb35dec658bb63ce3586b6b8258698826a8709b9ba73e65c7102ce55377b7c640d4de2f4d6426659ecce65cc499c98fbaebacf8da2d18a5e8a7642040d1da73c1cad9db5e5f2296f9af44468dc65dcc4e1612b0f4babb28b43310950add8ef6562a4b24c1cf4b9c2dfcf4dc8a5d184fa0805d6a3fe6911d1e6d666e68dc8fe41cf0f0de9faf1d0c24713a861c55665fe7dfee8df37854c55aa329ee3197417857c8c5c741a3e4b8b859bb63dce9344c4370e31001bb86cb57b060e3b035560f1226047172334bd1a1dc077bca0a3ed6e2fafad6c6651b5adb3e6d2755c7b77504758012a1a90bc9b0b69e2218348196dc5f442eb2c26992071282d9b0c5b432b4a8880a41345dd2e8b93a4161729cbb42e627badf0fd2834c6cb6b84eeaf853af78f075989c08ad958b1d75c2fc6cc758cca5489b9d85ae7abf8854e39c582e6aaa31b3d58efeff495178bb37fdec80bba836af6ca006f8265e540e80ceaa267df7934bc376e8712dc1487df686495db69094524c25ba27abe6b1fd2f1817031898138e74b296855ee7953f21bdaa72d20895eba0fb9b7e1d98f8c92ecaa14025ea88b290858a69dbf8bdd2d00828526f9d1b14d7672c53428bbce328fc4c645976c0b2a5d80905beb434c88a31fcbae8f6d0e9f0316242bbaea755ee36c71bcc6428edb6778bcfa5b5035c298b3cfd7d7b668a03ce2f548a5d080ae3d9fc4aeca18162f4dd6d05da7b91ddff609470dfcef7d3fb694b42f68b702217b9920bd918897f579a9d82f4860dbc17763f9a7e0b61558c4c10c50d15bb36ebf4645a830fc50637cb9e9b8676eb38368b8009d6d1e637e7d7de55844687d79000542a3318949c3a23dce95091cad666ea57d0ceee932ef202dcaf825aa79cf4ae4d893295c0e1b6728a58f391437597f8a8d1eec491edbb8d577f2dc307d511fb316b3cabe4f34ac291952e61df85908c97f056379b7c6d4cae3f9cfd8ec8af5fff7f7cbac2dde423035a4f37674740404cede5b7e1ff9837f5287225239ca5191518aad9d46f990e3d87b4f634c3ab5595affbbaf21c650a3ce573cea434f36b0393c64343a82de887e7ae46c0e4f4172640bad0b2831e7ba8c4b53a5e4112556fa696e33f6a07463aec1efe073b2d558f7406d4ef50e472f578c061ad6384ceec4410fe1d02fe9816c07bab37d36a6c8a41bac73e78c9a05ea6ad094f9bfeebbd35b15fdc276c44aac60ebe87e94a2cbc97115bd274ac0ca62955074a18c05e3e0749bf632bcafaaf713a9fcf69986175a556d7de5c7e3c2105177ce52612ef27127b2077677cb98da1d1a57e3ed3fd7bec13735a519350bab8f3826f60543ab315e8e9835ef355bedc00e47a854ef8bdb510100c0e029e4aae400134966057446486f94555b12fbc540f086444594f8be7213fc4746a358d5a20acbf638e4c95bb9a836d83a2ef7329de30a0753c1cbd7331e1581b0f593bc9726b2ae9e1417c80b67a82575b28806779e902e8730f10579c67cd2f9b6a88f69ac654f571f4705bd92ec1a5c870429a2ec3bed7eec1cc6abf768921d12eeda01d84b61bac67b777e23b2a335536a538213ee64efc935c9d03a932d790b787a0517fe09ea2dc3895af9bda2a0e498f9aaf63c4618e00f9bc12aa14f078dbc0bd87f6d5ba5dfdbbf9b51bdd15281dd7a77b03b41cb192f9fde461575e3e5a0f11e7587d0f3f2828af05a8109474703a0b4abe58d64bac0b81037b187561cf054036a8806f339c82ef4bd0f2c3818df73e408476cb8f0829332918e700e309afea1816de75408abac89305330f36fccabbbcff324ff0263decf335ffdacf502e10266df950d43c9b392ef3bf3c3e12b38a01dab26a2a2d2f6237977a1b8f5150f38c9c86a8028927bb3171d6663dd9f13ceccf8aff4b07a46c15cb4a27b00456b569d3f8b242f25592ad031eb60958159be7de68ab33d3a7724894be49aefefb5b738080f8a46b39f3804214391ecba3a69e58ba0df431523e6a9eebbf9c04c24ffc5dc649307a4409bb30ad13888e9b3b69bec94027e83e75c1f494a6b586c384b0ca9fb3086fc7ab5dc189c4a3e8211dcf6f42c73cfbbf390ad81cbca11a99901294d619358ab3544166a7e370114140e0051119d0a842d8c7292d70ffa2920fba25aa89bbb71ba453a07f64ba71ab808f9755b172bc77ce3bed56c760f0b4be3e2c60868aa33b25d67694f3308d2d2ff5a1f2474891f2ac493b02c1db89c1f48c357112c26e91b55b7ced2c4b4ba560fbf0e0e0f78d7149fbf5e5419cca3411e9ab32194ce1c33eef824fec16232d34e60a4835ceff658674051e2e104422880611c749ecaf535eeccbec1a712f6574447668f407b4c3d65a4d72afa4a7c13e6cf34e2c02658c2b6c2c44b32fdf9ef113bb34b50afde4048045517e41752fb9c01fda76a7de6021b1ec28e9dc5bbfe5c396189b46650ccb5490991a7c2b89729db00ee4a474916fd4e4022b0630b549f4d6f665192e47c6fe565620be30cec836b6bf6f16c1a2f8f4a53e558ed64a0e126f425b1bb4b5ff06aaffbebec98293d90da695d99a6b7c764b82cb379afcfe7c9702ab3296043ea1efecf6c235ce63d7761026e4ca813d7d3cfe834fd2c701780200011beba1bacd437dd136fa36bd76d965216bb156044e2e051c3e6786f0101bfb223f89cdb674ef5d1e3d443453a2e05a1d716a39947933425d41c4cf2363b87cf2761b128bf667e67b6bc222f110cb1e6b7d2f6ff44831b4b08895e4ae0df7f29933a6d1a2f7b753f4b8859508c40b6d77a75f9092079ffb5ad65711179829ca0d494e50a8b67035d6e8d7b63265448fbd0780588d0e68cab8e620d128cb57bd0215f6b2fc0dc0a49f2fc880b2a6bb1f26df5e3802f6ac69dfaf5a6c3787fff6e758550263ec884bf4dc525bfad8b2224acbe35f12c1906fa3a7dfe751021bd5e29199d37654930824e6d12a0e9353b03735e6eb66a549d25c070475ae68e98fe1ce26a24866aaacfe26e2e18127238cbcb93690f45b4da73742e17ac654cc8bd8dde28092f2a5f6660df325c41c71a186c67bafa32d08e28dac6a7429f59527a2ae631683cf7bf51de602b85b58d5cb3e6008d16d08e39332c711221ee1f1ab15f9ef786aea2e732900420046a46917e5ba7c120c403b770de5049726cd0c9ff9df17286073b6bd9dad3d73a28aa7064d00000071cb56b2db80186e5fa85e3e1b1984c068a2221f285173d37eceb9936ddb702a23c462b948482aab55df142c5761759ec6b876b34f1571284f9b381e91f14e68afd7aeb4a25baaebce3052850110ff7a572208a85b56be0e559c1b1fe489b8c9667cace9bcfc6a918dd6ccac642859a66d701e96eda5ff3bd470f0f4f0697fa7706e36979f5b0b6601c47453d3fb616572495ef6de75710c003b003a580000000000000000"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001e00)=@updsa={0x228, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @algo_auth_trunc={0xeb, 0x14, {{'wp512-generic\x00'}, 0x4f8, 0x200, "f1c47a7c0ffee2018b7717c91e7ce0171e69e2e723a523a67ab4957d4c778b1e35a3de3eae8a9fadc05448cc18bed3a8043c691af81cc63e83cf616288a1c7cee2eb701005af0a5516324d64da21751c4855730284011fb93eaf9e8ebcec1082d1fb16e2c3e66c9570c4f105523884aff5ca87150778c5576beb813a78d188a72a0f69a8f8d5ec2653e2bd7618433be1d77cb090ebffbe89f18109f0069ebf"}}]}, 0x228}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x0, 0x8000008000) [ 1086.189940] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.213808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=406542 comm=syz-executor.0 00:18:06 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) dup2(r1, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) sendfile(r2, r0, &(0x7f0000000340)=0x5, 0x28000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x7, 0xf0, 0x3ff, 0x0, 0x3, 0x5, 0x8000}, 0xc) 00:18:06 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB="f606d78a32657ad28cdb9956d037c854111ba02b87e31b9115b1233028b3f27e06000000000000007fe2b5eeabfed09846ba1f47450681fd75172fdefd9fd172634eb7236dd23f0531101a563f8f487f677d9941eacfc29e596d9cea5f12baba48868ebed288e613ba9bc2a9ad56125703c55bf8b8a3421da3490b7b2d4ed82f4013b6884fb55a5f112f27db54a0efdc034c66c6bfec991afeb00b7c54d88b94c1ab9ed790390c621f766cd58e4934bbc97e81a5f64682febcf9d9805f9778f80fd5"], 0xfdef) io_destroy(0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) r2 = dup(0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14a8}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001e00)=@updsa={0x228, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private2, 0x0, 0x33}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}, @algo_auth_trunc={0xeb, 0x14, {{'wp512-generic\x00'}, 0x4f8, 0x200, "f1c47a7c0ffee2018b7717c91e7ce0171e69e2e723a523a67ab4957d4c778b1e35a3de3eae8a9fadc05448cc18bed3a8043c691af81cc63e83cf616288a1c7cee2eb701005af0a5516324d64da21751c4855730284011fb93eaf9e8ebcec1082d1fb16e2c3e66c9570c4f105523884aff5ca87150778c5576beb813a78d188a72a0f69a8f8d5ec2653e2bd7618433be1d77cb090ebffbe89f18109f0069ebf"}}]}, 0x228}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x0, 0x8000008000) 00:18:06 executing program 0: setns(0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100001000600000000000000000000000500000000000000150000809be149f832650000000000f30ad022cea3b5906ed71efbac7160411494569681c28281208008c2fd0650ae634a1d3f5b42332fdb1ddff6c996d594f336ad93897a4c7c7d052c951ff3b19a2ae8dfe7daae4433b91e5be24f079e43a9060d92c52788cb564c5127467341e4376c1319a3cb91e308000000f3acaab637ceb7852dafdf71f385cfa97aa0b4888b849ea763a6372e3668ad38b4998b12b7f74f557998f5ab174fbc688112a84bc0"], 0x34}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x5c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x7, 0x0, 0x0, 0x0, @str='!-\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @binary="bb"}]}]}, 0x28}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000017c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x1b, 0x1, 0x70bd27, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x7c, 0x0, 0x0, @pid}, @nested={0x14, 0x72, 0x0, 0x1, [@typed={0x4, 0x66}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x12}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4814) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcad86393eddf18f6}, 0x81) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x1a, 0x101, 0x0, 0x0, {0x4}}, 0x14}}, 0x20000000) 00:18:06 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x530f, &(0x7f0000000000)=@lsa) [ 1086.368007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.378721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=406652 comm=syz-executor.0 00:18:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 00:18:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 00:18:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) [ 1086.425423] mac80211_hwsim hwsim15 wlan1: refused to change device tx_queue_len 00:18:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) [ 1086.463931] Bluetooth: hci5: link tx timeout [ 1086.464898] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.468011] Bluetooth: hci5: link tx timeout [ 1086.468587] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.475349] Bluetooth: hci5: link tx timeout [ 1086.475861] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.479702] Bluetooth: hci5: link tx timeout [ 1086.480513] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.481362] Bluetooth: hci5: link tx timeout [ 1086.481875] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.482710] Bluetooth: hci5: link tx timeout [ 1086.483243] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.492601] Bluetooth: hci5: link tx timeout [ 1086.493162] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.496661] Bluetooth: hci5: link tx timeout [ 1086.497627] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.504496] Bluetooth: hci5: link tx timeout [ 1086.505013] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.507253] Bluetooth: hci5: link tx timeout [ 1086.507767] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.509819] Bluetooth: hci5: link tx timeout [ 1086.510352] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.516940] Bluetooth: hci5: link tx timeout [ 1086.517487] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.519745] Bluetooth: hci5: link tx timeout [ 1086.520836] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.522894] Bluetooth: hci5: link tx timeout [ 1086.523415] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.525509] Bluetooth: hci5: link tx timeout [ 1086.525997] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.527642] Bluetooth: hci5: link tx timeout [ 1086.528202] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.529607] Bluetooth: hci5: link tx timeout [ 1086.530150] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.530937] Bluetooth: hci5: link tx timeout [ 1086.531460] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.532304] Bluetooth: hci5: link tx timeout [ 1086.532811] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.533624] Bluetooth: hci5: link tx timeout [ 1086.534139] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1086.756287] Bluetooth: hci0: command 0x041f tx timeout 00:18:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 00:18:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x530f, &(0x7f0000000000)=@lsa) 00:18:07 executing program 0: syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeef, 0xc002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:18:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 00:18:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002340), 0x0, 0x0) ppoll(&(0x7f0000002480)=[{r0}], 0x1, &(0x7f00000024c0)={0x0, 0x989680}, 0x0, 0x0) 00:18:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) 00:18:07 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) dup2(r1, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) sendfile(r2, r0, &(0x7f0000000340)=0x5, 0x28000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x7, 0xf0, 0x3ff, 0x0, 0x3, 0x5, 0x8000}, 0xc) 00:18:07 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000140)='-@\x00\xb7!\xf9Z\xbb,;\x7f\xc0\xa9J\xb3\v\xfb\x84\xaa\xb5\x9a\xa4O\xa8\xb5\xd2\x13/z\v\xae\xfc\xfek*D\xeb{\t\xba>\xe8\xe2\xba\x00\x00\x00\x00\x00\x00\xd0zd\xccD\xf4a\xd8/\x90x\xb5\xd8\x04\x19u\xf9D\xb7Eq\xc1\xcee\xd9\b0\xec\v\xe3\x96\x1f\x80\xe4Nk\xa6\xe1\b\x97,\x8b/\x96\x9b\xdb&\xd1\xe3J\xd5\xaf\xe3\xfc\xde\xbe\xa0\x8b\xeb\xea%\x10eW\xf6\xa0J\xe51\xa4\xfesm\x96\x89\x0f\xea\xa6\xc02\xd4\xb8y\x83L\xc4\x93U\x15\x9b\f\x9b\xc3Z\xff\\\x9d\x83\xe6\xc7fc\xa9n\x8e\aV\xe8\xf9\xf9\xe4\xfb+~\xabu\xf9K\x1d9[\xcd\x9b;=6Q\x80', 0x40, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x2000, 0x0, 0x0) [ 1087.211404] udc-core: couldn't find an available UDC or it's busy [ 1087.212666] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1087.227279] mac80211_hwsim hwsim15 wlan1: refused to change device tx_queue_len 00:18:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) 00:18:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) 00:18:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280), 0x24, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 00:18:07 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r0, 0x530f, &(0x7f0000000000)=@lsa) [ 1087.321139] Bluetooth: hci5: link tx timeout [ 1087.321864] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1087.322957] Bluetooth: hci5: link tx timeout [ 1087.323655] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1087.324713] Bluetooth: hci5: link tx timeout [ 1087.325412] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa 00:18:07 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ftruncate(r0, 0x1) ftruncate(r0, 0x7) [ 1087.334317] Bluetooth: hci5: link tx timeout [ 1087.335075] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1087.336136] Bluetooth: hci5: link tx timeout [ 1087.336797] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1087.354449] mac80211_hwsim hwsim15 wlan1: refused to change device tx_queue_len 00:18:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @ipv4=@dev}]}]}, 0x28}}, 0x0) 00:18:07 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x3, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x0) [ 1087.471853] mac80211_hwsim hwsim15 wlan1: refused to change device tx_queue_len 00:18:08 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') 00:18:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/236, 0xec}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58}, 0x41) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) dup2(r2, r3) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401}) 00:18:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x600, 0x102) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f00000003c0)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x20008800, 0x0, 0x0) 00:18:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001840)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x3c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 00:18:08 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 00:18:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0xfeee, 0xfd, 0x7f, 0xfb, 0xff, 0x0, 0x2, 0x4, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8000, 0x3, 0x32, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') pread64(r0, &(0x7f0000002100)=""/4095, 0xfff, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x20, 0x800}, 0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffe, @empty, 0x99d9}, 0x1c) 00:18:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000002e2f6676dd62c9dd1883df696c653200f6b4371731cbf05440d1ed8ce5862d8576839f3ab27ecdae288750c957"]) openat(r2, &(0x7f0000000280)='./file1\x00', 0x701f02, 0x2c) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) dup(r1) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000440)="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", 0x104}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) mkdirat(r3, &(0x7f0000000340)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') lseek(r4, 0x0, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)=0x5, 0xa5c9, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000040)={0x0, 0x1fa, [0x0, 0xc8a2, 0x0, 0x386, 0x101, 0x2]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) socket$netlink(0x10, 0x3, 0x13) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="99ffdd527aa304bdb341363cc42306a90c2fab1f6be2d4d8e5c2d56fb76c3c061e86f0856d6f87b84a92b65a8bd64561dd068ce027e3ab1e55", 0x39, 0x40000, &(0x7f0000000400)={0x11, 0x2, 0x0, 0x1, 0x9, 0x6, @random="ef64fa7843e8"}, 0x14) 00:18:08 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) dup2(r1, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) sendfile(r2, r0, &(0x7f0000000340)=0x5, 0x28000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x7, 0xf0, 0x3ff, 0x0, 0x3, 0x5, 0x8000}, 0xc) 00:18:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x1c, 0x21, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}, 0x1c}}, 0x0) 00:18:08 executing program 3: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fork() [ 1088.257848] Bluetooth: hci5: link tx timeout [ 1088.258587] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.259656] Bluetooth: hci5: link tx timeout [ 1088.260337] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.263476] Bluetooth: hci5: link tx timeout [ 1088.264437] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.265499] Bluetooth: hci5: link tx timeout [ 1088.266176] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.267927] Bluetooth: hci5: link tx timeout [ 1088.269021] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.270088] Bluetooth: hci5: link tx timeout [ 1088.270723] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.275426] Bluetooth: hci5: link tx timeout [ 1088.276319] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.277390] Bluetooth: hci5: link tx timeout [ 1088.278211] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.281901] Bluetooth: hci5: link tx timeout [ 1088.282778] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.283836] Bluetooth: hci5: link tx timeout [ 1088.284532] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.287095] Bluetooth: hci5: link tx timeout [ 1088.287810] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.288890] Bluetooth: hci5: link tx timeout [ 1088.289627] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa 00:18:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x600, 0x102) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f00000003c0)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x20008800, 0x0, 0x0) [ 1088.311807] Bluetooth: hci5: link tx timeout [ 1088.312636] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.313764] Bluetooth: hci5: link tx timeout [ 1088.314462] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.325840] Bluetooth: hci5: link tx timeout [ 1088.326683] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1088.327747] Bluetooth: hci5: link tx timeout [ 1088.328435] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa 00:18:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000004c0)) 00:18:08 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) [ 1088.485253] Bluetooth: hci5: command 0x0406 tx timeout 00:18:08 executing program 3: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x1}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0xc800, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:18:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/236, 0xec}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58}, 0x41) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) dup2(r2, r3) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401}) 00:18:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x600, 0x102) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f00000003c0)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x20008800, 0x0, 0x0) 00:18:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xef) close(r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 00:18:08 executing program 0: r0 = pidfd_open(0x0, 0x0) dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffc47) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 00:18:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/236, 0xec}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58}, 0x41) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) dup2(r2, r3) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401}) [ 1088.804105] Bluetooth: hci0: command 0x041f tx timeout 00:18:09 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xd976]}, 0x0, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0xffffffffffffffff]}, &(0x7f0000000140), 0x0, 0x8) 00:18:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b", 0x55, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x600, 0x102) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f00000003c0)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)='+', 0x1, 0x20008800, 0x0, 0x0) 00:18:09 executing program 0: r0 = pidfd_open(0x0, 0x0) dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffc47) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 00:18:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/236, 0xec}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x58}, 0x41) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xb, 0x80000001) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) dup2(r2, r3) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x0, 0xff, 0x7f, 0x1f, 0x0, 0x3, 0x1000, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x100, 0x822}, 0x10020, 0x0, 0xdb3, 0x1, 0x9, 0x7, 0x69e, 0x0, 0x20, 0x0, 0x8}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000000)={0x3f, 0x2, 0x1, 0x5, 0x8, 0x401}) 00:18:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000008c0)='./file0/file0\x00', 0x0, 0x40) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x50, r1, 0x10000000) syz_io_uring_setup(0x4476, &(0x7f0000000140)={0x0, 0x4326, 0x8, 0x2, 0x5, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) openat(r1, &(0x7f0000000100)='./file1\x00', 0x0, 0x80) r2 = accept4$unix(r0, &(0x7f00000011c0)=@abs, 0x0, 0x80800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x1000828, 0x0) syz_io_uring_complete(0x0) lseek(0xffffffffffffffff, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)={[{@clone_children}, {@name={'name', 0x3d, '/dev/vcsa#\x00'}}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file1'}}, {@name}, {@name={'name', 0x3d, '/dev/ttyS3\x00'}}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x92004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:18:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[0x0, 0x0, &(0x7f0000000300)='security.capability\x00'], &(0x7f0000000440)=[&(0x7f0000000400)=']$-\x00'], 0x1000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/loop4', 0x0, 0x35) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f00000005c0)="c7a634270aa41b8d7b43a7ef00e8075add539821b20d23bb1ba6ba2280e9ecc67567ff0ae81f5a03e285340083e9ac7f751ce6355dceeef4290c3b11b378f5a5b438d39080bd0659f862c7f1a9a8c6b9c926fad382e2ee6911c18a43fce6d5d9a19f1ae77e9042490ed7d5f262832b4d19281150378ea6590d4cb33986ffe15119b5e1c8ee674562f307cc3f3362f850cfca696f19d4c0ef63caa56a33ae9a3a053409f30d6fa9643c482e3c1f92c07c8f616a", 0xb3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 00:18:09 executing program 4: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4, @multicast1}, 0x10) shutdown(0xffffffffffffffff, 0x0) poll(&(0x7f0000000080)=[{}], 0x1, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/114, 0x72, 0x2140, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000300)={{r1}, "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"}) sendfile(r2, r3, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r5, 0x0, 0x80000001) 00:18:09 executing program 7: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f00000002c0)={@desc={0x1, 0x0, @desc1}}) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000240)=0x6) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) dup2(r1, 0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000080)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0xe) sendfile(r2, r0, &(0x7f0000000340)=0x5, 0x28000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0x7, 0xf0, 0x3ff, 0x0, 0x3, 0x5, 0x8000}, 0xc) 00:18:09 executing program 3: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() 00:18:09 executing program 2: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0xb, 0x4, @thr={&(0x7f0000000180)="f5671eb304000e794d9437767c8e3b80a9f114137840a6b129daf69ae7a8117cbf27b184b0602589e9156ac2b5b6e98fc3883e8abcebd185ec4714b27ac1c726fd7ed8ecf40a908a4f00de843a95c312a966ecdaba1b593c32e64cfda54ec6f381a3485d7dc7291f32b4f1f1efadbdbac3906872581baf1f5f27b8d9b53918ea70f64f20bb5176c038080bd8a04a319b1ecd5f7ed20ed32b8bb319c2d084bdf7d1d8f100a202923442b57bad91b1ed135cc1cb02adeea55c1dca5ec55f5d7dac9803097d74d4a659b5b3313d270f2a4cf55a", &(0x7f0000000300)="6fcf6be73a98f756c8cbe3eebf34f5918ced17a8ad5448c2219c24d67d6d07c2c7ab6b33a478cf6c52924d681eabe70835367a8ea9adbfbf436cd288c1f31384a6bf557d14ff80a6e173b3a9c5f7b30e3d96c40583c5c87ccc75d34a9a57a1a94888cf47168be58864d3c12437cd766adf3a16060e991fa7e3a75f05a6f3770fa4bb36d70eaf72b3f0d4eaa14918b2795fe1668220"}}, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b48000, 0x0, @perf_config_ext={0x0, 0x401}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) getsockname(r5, 0x0, &(0x7f00000001c0)) fallocate(r5, 0x22, 0x5a3f, 0x2) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:09 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{0x2, 0x0, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:18:09 executing program 1: pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f00000001c0), 0x20) writev(r0, &(0x7f0000001340)=[{&(0x7f00000000c0)="eae9c7d4437f1bbba75c0073cfba697bf3c110ac3e95e626e89438180c4716d5949d1a269a98117a5bdc", 0x2a}, {&(0x7f0000000100)="5200d9a23c6521f45fd9b68c1b5d4d38f7d652b418a865f3995fe1340d3d88ee741afd5df245a574474e4935fbb3ce98afdf87c9537dbf82b116a851b72610167fe1dc7fa1d360b371ba765cb6491159adb066ed9bf0a7cb08dabe715984d5b3e4be3d182c14c5a8510bd86da23a12b08c44a879c8b8dc0804065ea57ec1f2bad1915f43902a4fec6db613ff4a4629c7bb68727af5f594449bad1a1e00bab5f8d825299a89bfbd97e1203808cc9c95b5947fcdcbd4e4bf85", 0xb8}, {&(0x7f0000001500)="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", 0xf1f}], 0x3) 00:18:09 executing program 0: r0 = pidfd_open(0x0, 0x0) dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffc47) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 00:18:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='fd\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @remote}, 0x1c) getdents64(r1, &(0x7f0000001280)=""/192, 0xc0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x21, 0x0, &(0x7f0000000280)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000007c0)=ANY=[], 0x18) fcntl$notify(r0, 0x402, 0x20) syz_mount_image$vfat(&(0x7f0000000000), 0x0, 0x8, 0x0, 0x0, 0x4a00d, &(0x7f0000000380)=ANY=[@ANYBLOB='e', @ANYBLOB, @ANYRESDEC, @ANYBLOB=',\x00']) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 00:18:09 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x1, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)=ANY=[]) fcntl$getown(0xffffffffffffffff, 0x9) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x32, 0x34, 0x64, 0x34, 0x64, 0x39, 0x64, 0x65, 0x35, 0x65, 0x31, 0x66, 0x37, 0x63, 0x32, 0x30]}, &(0x7f0000000100)={0x0, "fa92d0e52f86277257ecdf8f6de7c6cf79baebc0cfee1b3b6ea5cf82bc949509d9c4c51d4fbb35afd2494a9b857e8dcfe9f67b43ceff2f6bf1f3f7979727fe43", 0x3f}, 0x48, r0) add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="82e1a851f3c0e5bb6362923ae64857e8e48132e146d750d54db7bd51d235162d509f2b527343c95cf77b314f1055310c8435155459a3c605ba7970dbfa51c6ac6953ffe353142b9d46b668edd0e211f46b84fe354055ccc7196efb1526fdd7fbc79042412ce544044a9d01187aa1d3d0b9be", 0x72, r0) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "78a6e9251a4b01819a6ff7c3e6b12d89d63a8a969a8762e5df703019c056cfda988cc1108e3ced8b0eaacb330415920b1b2bb84998a84d3af74d2597803cb673", 0x15}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc1}, &(0x7f0000000880)={0x0, "e94449a2d9afb1d14e3d76abf856f9f54da47be7dafc494c6d064a7874af3e1010bfb6dfca2b4e08b319aa9c0ab4114faabfd1acdd255360ed5f6d2ffc1c2505", 0x12}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r1) keyctl$search(0xa, 0x0, &(0x7f0000000080)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}], 0x0, &(0x7f0000011700)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0xcbb252a02116ca1b, 0x4) fcntl$getown(r3, 0x9) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000000)=0x3, 0x4) 00:18:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) perf_event_open(&(0x7f0000000880)={0x0, 0x80, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0xc101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0xd65, 0x6}, 0x3, 0x78916be5, 0x40, 0x1, 0x0, 0xa7, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000380)={0x1f, 0x3}, 0x6) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0]\xe6\x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', 0x0) 00:18:09 executing program 3: syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) 00:18:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)={0x2, 0x0, 0x0, 'Y'}) 00:18:09 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7a56}}]}}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x170) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1) 00:18:09 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000140)=0x72, 0x4) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x1b) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 00:18:09 executing program 0: r0 = pidfd_open(0x0, 0x0) dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffc47) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 00:18:09 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000002780)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x10, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@dstopts={0x3b}], @mlv2_report}}}}}, 0x0) 00:18:09 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) signalfd4(r0, 0x0, 0x0, 0x80800) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 00:18:09 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5423, 0x0) [ 1090.127461] kernel write not supported for file /408033/attr/exec (pid: 324915 comm: kworker/0:1) 00:18:10 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x0, 0xfff, 0x0, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x5420, 0x0) 00:18:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x40015) socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) dup2(r3, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) 00:18:10 executing program 3: syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) 00:18:10 executing program 5: r0 = getpgid(0x0) clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 00:18:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7a56}}]}}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x170) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1) 00:18:10 executing program 0: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000001000000180000007df867d0ef1f41a2a18333b4cfbc9f3695e245d5fcd9a9ae64417688dc866fee23a652", @ANYRES32=r0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00./file0\x00']) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) 00:18:10 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000000ffff00000000000000000007"], 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x161}) syncfs(0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'batadv0\x00', {0x2, 0x0, @multicast1}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) r2 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x40000}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 00:18:10 executing program 3: syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) 00:18:10 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:10 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)='1', 0x1}], 0x3e8) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 00:18:10 executing program 5: set_mempolicy(0x3, &(0x7f0000000040)=0x1, 0x20) syz_io_uring_setup(0x5853, &(0x7f0000000140)={0x0, 0x0, 0x2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000100)) 00:18:10 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) signalfd4(r0, 0x0, 0x0, 0x80800) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 00:18:10 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) dup2(r0, r1) 00:18:10 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) 00:18:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7a56}}]}}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x170) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1) 00:18:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) dup2(r2, r0) 00:18:10 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x9, 0x45, 0x2, 0x6}, {0x5, 0x1, 0x8, 0x75329030}, {0x3, 0xad, 0xfa, 0x1}, {0x8000, 0x7b, 0x40, 0xffffffff}, {0x1, 0x41, 0x0, 0x2}]}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x28052, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x12a00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmctl$IPC_RMID(0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000013c0)=""/198) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/174) 00:18:10 executing program 3: syz_emit_ethernet(0x15, &(0x7f00000002c0)={@multicast, @local, @val={@void, {0x8906}}, {@x25}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1, 0x2000000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) 00:18:10 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x7a56}}]}}) r2 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x170) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') readv(r3, &(0x7f0000001440)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1) 00:18:10 executing program 4: r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) ftruncate(r0, 0x7) 00:18:10 executing program 0: syz_emit_ethernet(0x32e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "961517", 0x2f8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5912, [{0x0, 0x1f, "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"}, {0x0, 0xf, "311c1c5f30690bec8e72033c866a73eb26f3ae5e2774b32ed67dffea2d4b08a36dab1da3177e671c1151de6c95ac83c4b86abbaddce466e4fb0fce1c126765d56317b4cc2550c30862b02c3c4ca7b3cb67b07f522f86ecfe9e3448e94f529a10bc80392b35e76a1604ffdad8874b8e945857e90042d6f045fbb994"}, {0x0, 0x15, "683ff6cba5a042d30ed204fc61fd79299beddf84b5dff27ae963f4fd32cc3fd9fe4ae8887852dba81747700671f81053be5764d6a30d71d014466c298a52843e80716b442b76d0390c96eaad8cd8fcc99c754dce884acecb6877861412a3477306183e175be590a99e9eb3154d016a0e17a491714d170ba0152d52e67966353caf7fd955eeb224e4c3c742d41ee97eb09d7504c68d77206fe21e7a263625b49ed385e541f744b6"}, {0x0, 0x18, "29e70acf91761cb9196e139e3fdfe1c00205ba9571433c766ab1fa285a39f9a91e8dcf6954dfb2845c66ba88ba43dbd6a14929d1318f2709a27f5dfcdd0b38da5af0a28b214ea330a5b719bd30372c0bd524cfc5228761fb76925cbfb369a02457de445e1d03b0947265a8716f46c450a90d001c5f5618c44eb199e6ceb0c692a78408663923c2d4e2b569ee4b3c7942972f07a0b9d9c64f198cd7f55f6ca0d01db4375f34705f661337183734b2cce24659add4d2d1434bdc35bb7f604ed546f328fcfa"}]}}}}}}, 0x0) 00:18:10 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:10 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) 00:18:10 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x108) io_uring_enter(0xffffffffffffffff, 0x76d2, 0xfceb, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0xd7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) syz_io_uring_setup(0x40000021, &(0x7f0000000500), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000002a40)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup(r2, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) 00:18:10 executing program 0: pipe(&(0x7f0000000240)) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0xa000, 0x0, 0x0, 0x9, 0x0, 0xa5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000380)={0x10}) 00:18:10 executing program 5: pwritev(0xffffffffffffffff, &(0x7f0000001140)=[{&(0x7f0000000140)="c45fe57fc5227a6ba124175ecea7f5534e60c08fd6656f86455f2e572fc0c681678fc3d6f12026ab6644dceeab6c983047ca7a98955070ca1726cf3be53a66648300bb8a73cbc9a3285786", 0x4b}], 0x1, 0x0, 0x0) r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) 00:18:10 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:11 executing program 5: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "af262b9658950a83"}) io_setup(0x0, &(0x7f0000000280)) 00:18:11 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:11 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) 00:18:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) 00:18:11 executing program 6: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:11 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) signalfd4(r0, 0x0, 0x0, 0x80800) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 00:18:11 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 00:18:11 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000001c0)) 00:18:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000000000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 00:18:11 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@ceph_nfs_confh={0x10}, &(0x7f00000016c0), 0x0) 00:18:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) 00:18:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) [ 1091.445673] kauditd_printk_skb: 340 callbacks suppressed [ 1091.445685] audit: type=1326 audit(1091.372:2902): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=409292 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741008b19 code=0x7ffc0000 [ 1091.455421] audit: type=1326 audit(1091.382:2903): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=409292 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741008b19 code=0x7ffc0000 00:18:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r1, 0x0) 00:18:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x5c, 0x1e, 0x101, 0x0, 0x0, {{@in=@dev}, @in=@private}, [@replay_val={0x10}, @mark={0xc}]}, 0x5c}}, 0x0) 00:18:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup2(r2, r0) socket$inet6_udp(0xa, 0x2, 0x0) 00:18:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0xfffffffffffffeec}}]}, 0x148}}, 0x0) [ 1091.552617] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 1091.579656] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:18:11 executing program 0: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0xffffffffffffffff) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) 00:18:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) 00:18:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000200)=@secondary) 00:18:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup2(r2, r0) socket$inet6_udp(0xa, 0x2, 0x0) 00:18:11 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:11 executing program 7: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000000)=0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "e35e91852b1941028300000000000000002000"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) signalfd4(r0, 0x0, 0x0, 0x80800) sendfile(r1, r0, 0x0, 0x4000007ffffffc) 00:18:11 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 1091.784449] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:18:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup2(r2, r0) socket$inet6_udp(0xa, 0x2, 0x0) 00:18:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x20, 0x11, 0xe21, 0x0, 0x0, {0x7}, [@generic="020000003ae08c9cf1"]}, 0x20}}, 0x0) [ 1091.872931] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:18:11 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:11 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) dup2(r2, r0) socket$inet6_udp(0xa, 0x2, 0x0) 00:18:12 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) [ 1092.119652] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:18:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x11}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 00:18:12 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:12 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0xc8, 0x0, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r1, r0, 0x0) 00:18:12 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x8a, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000500)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x6}}) 00:18:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 3: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 00:18:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f0000000180)=0x8000000000056cb, r3, &(0x7f0000000100)=0x6aa, 0x7, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xaa011, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 00:18:12 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000000400)=0xe8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, 0xffffffffffffffff, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r4, 0x0, r4, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000100)={0x1}) 00:18:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x9, r0, 0xfffffffffffffffc, 0x0, 0x0) 00:18:12 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x0, 0x0, 0x8c, &(0x7f0000000340)={[], [{@euid_lt={'euid<', 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@measure}, {@seclabel}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) syz_io_uring_setup(0x631c, &(0x7f0000000180)={0x0, 0xf474, 0x4eae4e72e1fc3006, 0x2, 0x2d7, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="041f0000000000000502ff"], 0x108) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x108) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) dup2(r1, r2) pipe(&(0x7f00000000c0)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:18:12 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="409156b5ea6d18e3b27e753db9825124b9a2b5bc0000000000040000000000", @ANYRES32=r0, @ANYBLOB="0852000004d373c47cc761460f66691c2db13ed9548f96d26d081f21d35ea8c08c51aefb1869ba36ff678a67715a2cf3addda75b71d22c6a91f119ec7b8d79f7c323271461d33b5a4153df9d0de090e98406c259b92461c9b053021ec2e690954d2f7da8b4963ab9"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) openat(r2, &(0x7f0000000240)='./file0\x00', 0x143, 0x2) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) mq_getsetattr(r5, &(0x7f00000000c0)={0x1, 0x400, 0x6530, 0x5}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0xa28c2, 0x0) 00:18:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) 00:18:12 executing program 1: timer_gettime(0x0, 0x0) 00:18:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000640)={{}, "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE, 0x81) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2100, 0xb91, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f0000000180)=0x8000000000056cb, r3, &(0x7f0000000100)=0x6aa, 0x7, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xaa011, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 00:18:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="409156b5ea6d18e3b27e753db9825124b9a2b5bc0000000000040000000000", @ANYRES32=r0, @ANYBLOB="0852000004d373c47cc761460f66691c2db13ed9548f96d26d081f21d35ea8c08c51aefb1869ba36ff678a67715a2cf3addda75b71d22c6a91f119ec7b8d79f7c323271461d33b5a4153df9d0de090e98406c259b92461c9b053021ec2e690954d2f7da8b4963ab9"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) openat(r2, &(0x7f0000000240)='./file0\x00', 0x143, 0x2) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) mq_getsetattr(r5, &(0x7f00000000c0)={0x1, 0x400, 0x6530, 0x5}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0xa28c2, 0x0) 00:18:12 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x1a0, 0xb800}, {&(0x7f0000010d00)="6600180000000000001800080000000008007809140b2a3a080200000100000101005252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08006600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0800860021000000000000211a0400000000041a7809140b2a3a08000000010000010846494c4530", 0xf2, 0xc000}], 0x0, &(0x7f0000011700)=ANY=[]) openat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) 00:18:12 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000000)) 00:18:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x14}, 0x14}}, 0x20000844) 00:18:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="409156b5ea6d18e3b27e753db9825124b9a2b5bc0000000000040000000000", @ANYRES32=r0, @ANYBLOB="0852000004d373c47cc761460f66691c2db13ed9548f96d26d081f21d35ea8c08c51aefb1869ba36ff678a67715a2cf3addda75b71d22c6a91f119ec7b8d79f7c323271461d33b5a4153df9d0de090e98406c259b92461c9b053021ec2e690954d2f7da8b4963ab9"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) openat(r2, &(0x7f0000000240)='./file0\x00', 0x143, 0x2) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) mq_getsetattr(r5, &(0x7f00000000c0)={0x1, 0x400, 0x6530, 0x5}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0xa28c2, 0x0) 00:18:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd4(r0, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8e1b95d7093b2a4c0df989838ef06cac5c525ce503c89652c95ec4319edba7c3942807e0e3eaffcca0f36efd4b3e0876d4a079d23359eb148938043833c394cc87ac4"]}, 0x68}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0)={[0xb6]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) [ 1092.741638] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1092.742405] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f0000000180)=0x8000000000056cb, r3, &(0x7f0000000100)=0x6aa, 0x7, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xaa011, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 00:18:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000640)={{}, "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE, 0x81) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2100, 0xb91, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') dup2(r0, r1) 00:18:12 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x29, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 00:18:12 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000000)) 00:18:12 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x10000000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}], 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="409156b5ea6d18e3b27e753db9825124b9a2b5bc0000000000040000000000", @ANYRES32=r0, @ANYBLOB="0852000004d373c47cc761460f66691c2db13ed9548f96d26d081f21d35ea8c08c51aefb1869ba36ff678a67715a2cf3addda75b71d22c6a91f119ec7b8d79f7c323271461d33b5a4153df9d0de090e98406c259b92461c9b053021ec2e690954d2f7da8b4963ab9"]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) openat(r2, &(0x7f0000000240)='./file0\x00', 0x143, 0x2) r5 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0) mq_getsetattr(r5, &(0x7f00000000c0)={0x1, 0x400, 0x6530, 0x5}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000100)={0x0, 0x2}) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0xa28c2, 0x0) [ 1092.944564] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1092.945261] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1092.945940] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:18:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f0000000180)=0x8000000000056cb, r3, &(0x7f0000000100)=0x6aa, 0x7, 0x0) fcntl$setown(r2, 0x8, 0x0) close(r2) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x10001, 0xaa011, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x240, 0x7, 0x0, 0x7, 0x0, 0x7, 0x9, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000140)={0x7, 'veth0\x00', {0x4}}) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)="5afd9f303f1af27d7c727489148e9448b568a740018a6799fb420f5627ca4c48e48982413b096cc04619d2a5b78364ed6d0a2245df1b28fdfe189a6dad630b100d1b081ee27179623260ca01ea0fdd0d5a4e83d0d7aee75295101db285e955a763ab8bcbb0f243d2f27a25b1736893b989993f21367d86a6d5b21e0d86fb95be5d4f06ed301213fe5909b637156712a25f5dc432abacf083fc3e89c456a526ef1bf182a0b30dbca6440b9268a149034ae3fa22fdd2373d6ffb83fc048633", 0xbe, r3}, 0x68) 00:18:12 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x29, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 00:18:12 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000180)=0x6) setrlimit(0x7, &(0x7f0000000000)) r1 = mq_open(&(0x7f0000000100)='^$-}\x00', 0x800, 0xc0, &(0x7f0000000140)={0x401, 0x5, 0x40, 0x20000000002}) syz_io_uring_setup(0x7a82, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x22, 0x278}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f00000002c0), &(0x7f00000000c0)) write(r1, &(0x7f0000000200)="6370644dea12f3b48b8ff8af032851b4ebb459b6", 0x14) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) ptrace(0x4207, 0x0) r3 = fork() ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000340)={&(0x7f00000004c0)=""/208, 0xd0}) 00:18:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000640)={{}, "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE, 0x81) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2100, 0xb91, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x1, 0xde) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001a0011cd00000000000008000000000000000010", @ANYRES32=0x0, @ANYBLOB="0c00048005"], 0x28}}, 0x0) 00:18:12 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x3, 0x0) 00:18:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd4(r0, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8e1b95d7093b2a4c0df989838ef06cac5c525ce503c89652c95ec4319edba7c3942807e0e3eaffcca0f36efd4b3e0876d4a079d23359eb148938043833c394cc87ac4"]}, 0x68}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0)={[0xb6]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) [ 1092.958629] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1092.959342] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1092.959966] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 00:18:12 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000000)) [ 1092.975871] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1092.976718] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:12 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x29, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 00:18:12 executing program 7: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000000)) 00:18:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000640), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 00:18:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd4(r0, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8e1b95d7093b2a4c0df989838ef06cac5c525ce503c89652c95ec4319edba7c3942807e0e3eaffcca0f36efd4b3e0876d4a079d23359eb148938043833c394cc87ac4"]}, 0x68}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0)={[0xb6]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) 00:18:12 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x3, 0x0) 00:18:13 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="100001000000002000050000000000"], 0x3c, 0x2) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[]) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x86) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00') readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001340)=""/215, 0xd7}], 0x1) [ 1093.108342] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1093.109014] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1093.208419] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 1093.209282] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. 00:18:13 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000640)={{}, "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"}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_REMOVE, 0x81) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2100, 0xb91, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 00:18:13 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x29, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 00:18:13 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x3, 0x0) 00:18:13 executing program 6: r0 = socket$inet(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000004c0)=0x219e, 0x4) sendto(r0, 0x0, 0xfc, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0x80fe}, 0x80) 00:18:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd4(r0, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8e1b95d7093b2a4c0df989838ef06cac5c525ce503c89652c95ec4319edba7c3942807e0e3eaffcca0f36efd4b3e0876d4a079d23359eb148938043833c394cc87ac4"]}, 0x68}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0)={[0xb6]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) 00:18:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/46, &(0x7f0000000180)=0x2e) 00:18:13 executing program 5: prctl$PR_SET_THP_DISABLE(0x29, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r0, 0x402, 0xa) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) timer_create(0x2, &(0x7f0000000240)={0x0, 0xb, 0x4}, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x3, 0x0) 00:18:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/46, &(0x7f0000000180)=0x2e) 00:18:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r0, &(0x7f00000001c0)=""/122, 0x7a, 0x0) syz_io_uring_setup(0x21, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) 00:18:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/46, &(0x7f0000000180)=0x2e) 00:18:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000080)=""/46, &(0x7f0000000180)=0x2e) 00:18:13 executing program 4: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x11}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:18:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) [ 1093.378667] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 00:18:13 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create(0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)) 00:18:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x8f}, @generic="52f46caa81816a9bb5"]}, 0x24}}, 0x0) 00:18:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x48, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x81, 0x6, 0xfe, 0x1f, 0x0, 0x0, 0x10, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x5}, 0x0, 0x1, 0x7, 0x0, 0x401, 0x9, 0xf0f, 0x0, 0x8, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x2, 0x0, 0x5, 0x4}, 0x7) ioctl$TCSETSW2(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, "f2695c43faf79979fcc2000300"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x0, 0x6, 0x240, 0x9, 0x10, "07c7d1e000"}) signalfd(0xffffffffffffffff, &(0x7f0000000380)={[0x81]}, 0x8) 00:18:13 executing program 7: clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180), {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) clone3(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 00:18:13 executing program 6: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3d}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x3, 0x0, 0x0, 'queue1\x00'}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cb0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) socket$inet6_udplite(0xa, 0x2, 0x88) 00:18:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) [ 1093.492918] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) [ 1093.537298] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 6: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x12000440) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) inotify_rm_watch(r3, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) [ 1093.572970] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x8f}, @generic="52f46caa81816a9bb5"]}, 0x24}}, 0x0) [ 1093.612731] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) [ 1093.637927] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) [ 1093.676941] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) [ 1093.797971] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000200), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=',', 0x1}], 0x1}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="0126bd74b9c5870d15e9db9bb63575cc98a5a4da306fa3f4edb77847a822381337cfde8cb427411747bb3646bee92619f0aeb8b9a8b4fcf89367843ce631bc909d19e2e4502f5d25b2dd641f2d32a9e0656808b5d096d6bd46ea80db75aaa4e753dd378115b24e9a1be97f1557d105c0f969313d9411c677954e8a63058e98412cb9b4ad1205dab62a57c7e184bc806e45f82cf2716e9fcbdc809c72489d9a3c115b43a5eb4abe9ab9b2af3aa84fa079538594100b9f29", 0xb7}, {&(0x7f0000001000)="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", 0xa8a}], 0x2}}], 0x1, 0x0) 00:18:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x8f}, @generic="52f46caa81816a9bb5"]}, 0x24}}, 0x0) 00:18:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}]}]}, 0x28}}, 0x0) 00:18:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x24, 0x2a, 0x878c5bf8df414e27, 0x0, 0x0, {}, [@typed={0x4, 0x8f}, @generic="52f46caa81816a9bb5"]}, 0x24}}, 0x0) [ 1093.840209] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) [ 1093.858632] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 63 (only 16 groups) 00:18:13 executing program 3: clock_adjtime(0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa086010000000000}) 00:18:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x10c, 0x7d6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)="b343ba3a06e764cf30690050b624600b67bf48f93561a8721370fa9483263799b82feeb7b9f91d8bf80a51dea7748be553383617514ea63773094fa486e267d9c5c8a17e7142b7d007a397f01895a048d54802a100aa68ad7f62dcd85232d7aae8a70d6c774898952995b4e89802353ec105109a8b5cfd60", 0x78}, {&(0x7f0000000180)="9acbc44e19afa142be168d56e18277f62b2bae73c43b77c1470d301e1de02c506607a430f283545f38443bd173a7e7fee5fdd2bb26e385fd735b0e728e0b0cd6af9feeb13d4344118cd962b165c6532b35b2fbd9e89e7bbe77c58d841afd262c9a2458ed5f9116379e47a80b9c921034b935c1cc0d66974e618e34ef88436230d0d6d812ce75d54feb3c57226cfabf573bd0112918378a1c743eb15656ffb0c9aab4dd64e07f305c553196f03425d4cde672c8cf16ff55b1f88436a63f0b8d69c5670c0cd2", 0xc5}], 0x2) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001e00)={{r0}, 0x0, 0x1c, @unused=[0x2, 0x7f, 0x7fff, 0x3], @devid}) dup2(r0, r0) clone3(&(0x7f0000000080)={0x1040900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x3f}) 00:18:13 executing program 6: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x7b, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 00:18:13 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:13 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1d) 00:18:13 executing program 0: prctl$PR_MCE_KILL(0x35, 0x1, 0x4) 00:18:13 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x5b) 00:18:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 00:18:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) [ 1094.093804] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 00:18:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x4b, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 00:18:14 executing program 1: sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x0, 0x70bd27, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000002000001000000000000000b0000000001", 0xfdd7, 0x400}, {0x0, 0x0, 0xffffffffddfffbf8}, {&(0x7f00000006c0)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) 00:18:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 00:18:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x22, 0x101}, 0x14}}, 0x0) 00:18:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 1094.374739] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) [ 1094.426989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) [ 1094.448515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 00:18:14 executing program 5: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast2, @empty, @loopback}}}}, 0x0) 00:18:14 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x20000}, 0x18, 0x0) [ 1094.641897] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x4, 0x1, 0x40, 0xff, 0x0, 0x6, 0x80080, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0xa}, 0x10204, 0xffffffff, 0x1ff, 0x7, 0x5, 0x6, 0x9, 0x0, 0xfff, 0x0, 0x100}, 0x0, 0xc, r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$revoke(0x3, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 00:18:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 00:18:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 1094.733453] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:18:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x80, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:restorecond_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @remote}}}, 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xf7, 0x26, 0x1, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8fb, 0x0, @perf_config_ext={0x2, 0x1}, 0x4040, 0x0, 0x19d7e2a, 0x1, 0x20, 0x3, 0xd078, 0x0, 0x2}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', &(0x7f0000001640)='nl80211\x00'], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 00:18:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0}) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x9530}, {}, {0xffffffffffffffff, 0x18}, {0xffffffffffffffff, 0x100}, {}], 0x5, &(0x7f0000000240)={r0}, &(0x7f0000000280)={[0x4]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x3ff}, 0x8) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x5, 0x3}) sendfile(r2, r1, 0x0, 0x9bbb) 00:18:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') writev(r0, &(0x7f0000000500)=[{&(0x7f0000000040)='7', 0x1}], 0x1) 00:18:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:14 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 00:18:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 1094.935432] audit: type=1326 audit(1094.860:2904): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412535 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704601bb19 code=0x7ffc0000 [ 1094.939144] audit: type=1326 audit(1094.861:2905): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412535 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7f704601bb19 code=0x7ffc0000 [ 1094.946236] audit: type=1326 audit(1094.861:2906): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412535 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704601bb19 code=0x7ffc0000 [ 1094.968695] audit: type=1326 audit(1094.861:2907): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412535 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f704601bb19 code=0x7ffc0000 [ 1094.981774] audit: type=1326 audit(1094.863:2908): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412535 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f704601bb19 code=0x7ffc0000 00:18:14 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) 00:18:14 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 1095.022663] audit: type=1326 audit(1094.948:2909): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412602 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741008b19 code=0x7ffc0000 [ 1095.027507] audit: type=1326 audit(1094.953:2910): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412602 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb741008b19 code=0x7ffc0000 [ 1095.031344] audit: type=1326 audit(1094.957:2911): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=412602 comm="syz-executor.0" exe="/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb741008b19 code=0x7ffc0000 00:18:14 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x2, @unused=[0x1, 0x7ff, 0x9, 0x4], @name="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"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = pidfd_getfd(r2, r1, 0x0) tee(r3, r0, 0x4, 0x0) fcntl$dupfd(r0, 0x0, r2) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x40010, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) [ 1095.107607] 9pnet: Insufficient options for proto=fd 00:18:15 executing program 4: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) timer_create(0x9, 0x0, &(0x7f00000014c0)) 00:18:15 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) 00:18:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x125001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000180)=""/156, 0x9c}], 0x2, 0xfff, 0x1) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x9, 0xfffffff9, 0x129) r2 = syz_io_uring_setup(0x20, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) splice(r2, &(0x7f0000000280)=0x2, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x3, 0x3) 00:18:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) readv(r1, &(0x7f0000001940)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000740)=""/193, 0xc1}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 00:18:15 executing program 0: stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x20) 00:18:15 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)) sendfile(r0, r1, 0x0, 0x20d315) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x9, 0x80, 0x5, 0xb0, 0x0, 0x40, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x1101, 0x20, 0x2, 0x8, 0xfff, 0x2, 0x7ff, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x3, r2, 0x9) 00:18:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="15ca666bf6b659fabc3aa4dfd1720160336ebe13bccb5dc712713c8d5080742b0f67d461c6f4e1aab0a975d9cb1c8f09ce56edfb0c2abafdc9fafffae0b011d59fd6e827a5615a3ef3c09bce491e98f03f057b4e3a42118e808a3204212f4c64687484a916f6cc0eb591cc6762911312e2a6903447429aa51878791d9d211d2ad8deadb405589771782a7299d6c5da3b7171b78098fe3bbaf8ce7328751fc6861b4c7dd4a9737776e9433c11a4710e9cae6665fe91eb69892c4debfd4d74cca7213b5a8233e134", 0xc7}, {&(0x7f0000000200)="24930ebc0e00004b7fbb12d552774050f8937cf6627dc8f07c2af9ec51919806810537b201fe0182eb5243f5bf58", 0x2e}, {&(0x7f0000000b00)="36e79a2cd16d7f9f902d6ae0a26e8821ddf34afbb72776b6398a846281906c61e3b642fd6a201b859430dc61e57cc6f0f78801f4e2aa52f4ccb8d0a6e19de6bbbb5522586cd8e8733d18eb2e6c08a4d8c2f8b4d6a25ec187be94be535b33156c9c0b3216c0ad847f2154ac3aac0bebdd3a1e0310c0264848d7f38184808ff90558e76b09275f9d1b72db599bf9f133e970b5c0ad3fc5225393fcc6b8848dcde7abf7a3034c7502f72ecab761d750c496a91c1b0845a0b7f2289727cb1063edf6926ab1a23f7cca1f23ab308a6d23bcdf6b1609e3858d149e6e6069157aff823d03e5306d8a6e9bd43bc30a977308234b938961e33f3434508bd80ca5e578122acde5f5c1b321d28249c82e4d395d958aff9ea8650fefe0b85ee590c7bd0fd7ed7634e686f9b131bd1059a2c164949ff38a5af913f2c120ab5e299474a5582e607531b11386f8fa1511416917424713649ed2de8a70a9605c160c0f2bda272574fd3e0f7beb6cc52d7e75edb90f95d8f43d0f0d934a2f6c983bedb1744d1e48792ebb922f1f27fbaa0eccd52b352904d2d0747675d77d4c98289d955765f3f02dc920c6954d15ad49f9f45705ab45289c31c990944352f0503171db45e16282c8b8d9698070ba2461081e633681a12f5558247ec484e60cff666645d6a2e59cd97c8c3433bb633ac8a4c7f8db8ea5711c14c9bf6cdefb251b6c3affc58f427b4cc0b250e7ff8cb109faff50828f28b424cf3ef491701a87d0143431b77a874892d7736a50864a4a62ec4019bb58eb336afb3342ec2e4431edcfe6ab1a02b5bb336f81bde6648359262d63616175a359b14cc775a7b8df726d9472971b917ee14a4b39ffb0f7f048f08a81ecb29a634902674839c7a36223feb702d76f497cf7bcab800c77b366b500c8174e97f0130e3f012fb074da721bc763df72b6c91be4c028f3cce24dc0f08ab013cb02600acbb3267ef669f40e9d6cdeb747b338c0b2c5a764e05042c7d112a4deab8751cd40bce6bbe929a7b902fc5489a2e3c57aa7873cc42da62421017fdac0023ec7d5cf0c8f3c3a74f9deb7cdc56b7f7d685c8c1c13b8cd0ce1e1f353e5249cd71554d82569dcba9587b77fd9a021cb61e67d1e478f80e0330d3a3aaa7b44be9fdb3666b4a9e156f0dd9ae9b8c3555693badb29374f2ca0cc5aca196cb0d97d1e2225004ebcd065fc1a99d4e5ff390946d988ce2796418829c88a62bc35c2c0d0782708e0e9f49e0e9fd8a9a7d51a49aac17150c0364ecf3278d41f335759c43b03e96f8217a593fe38d311132a5d8cf3ef1f748371b343376cd4872c09ccf7b4fedd808392077e3d8cad1c0796c03ea62a857ec9f135f9e2d5b93b1ce1cc71564810b5f0d4b4f72b80af5f0cff5552f8a599466e7879eb0951a26411c82ab5d80dc94d77fcb339052370ba291d70186832b803992d55d2888aa728b0c11c702bc391f8bee6a34c105ed23125c4c16a7d39971d90fed35c2b4fab1888f704574c0215d3776b0e4464191a3aa111c11a61857710e341de15125418638d80bc30e4382bf73d000f997fc880e586a6b09e0d619e72c1010db76589cba2cee450bc996e8ead9d658ad3f9434f5a76f0677a3a58c1b9e05454442558e93b95e7efd5a196f5db4cf3793afe77a9c1ef1a0274c6f0be1cde03d48bf78291f93e778bbe029749d0c04be65afb", 0x4b4}], 0x3, &(0x7f0000000280)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x28, 0x6, "1df069bc"}, @rr={0x7, 0xf, 0x29, [@broadcast, @rand_addr, @dev]}]}}}], 0x28}, 0x0) 00:18:15 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) 00:18:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) write$snapshot(r0, &(0x7f0000000ec0)='}', 0x1) 00:18:15 executing program 0: syz_io_uring_setup(0xa4b, &(0x7f0000000000), &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x40000, 0x0, 0x0, 0x0) 00:18:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x125001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000180)=""/156, 0x9c}], 0x2, 0xfff, 0x1) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x9, 0xfffffff9, 0x129) r2 = syz_io_uring_setup(0x20, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) splice(r2, &(0x7f0000000280)=0x2, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x3, 0x3) 00:18:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000240)=""/140) 00:18:15 executing program 1: clone3(&(0x7f00000002c0)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='asymmetric\x00', 0xfffffffffffffffb) io_submit(0x0, 0x0, 0x0) 00:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/100) 00:18:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1a, 0x0, 0x0) 00:18:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000240)=""/140) 00:18:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x125001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000180)=""/156, 0x9c}], 0x2, 0xfff, 0x1) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x9, 0xfffffff9, 0x129) r2 = syz_io_uring_setup(0x20, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) splice(r2, &(0x7f0000000280)=0x2, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x3, 0x3) [ 1095.738383] FAULT_INJECTION: forcing a failure. [ 1095.738383] name failslab, interval 1, probability 0, space 0, times 1 [ 1095.739396] CPU: 0 PID: 413539 Comm: syz-executor.1 Not tainted 5.10.214 #1 [ 1095.740151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.740835] Call Trace: [ 1095.741063] dump_stack+0x107/0x167 [ 1095.741379] should_fail.cold+0x5/0xa [ 1095.741696] ? sock_alloc_inode+0x18/0x1c0 [ 1095.742049] should_failslab+0x5/0x20 [ 1095.742364] kmem_cache_alloc+0x5b/0x310 [ 1095.742705] ? selinux_ipv6_output+0x180/0x180 [ 1095.743087] ? sock_free_inode+0x20/0x20 [ 1095.743421] sock_alloc_inode+0x18/0x1c0 [ 1095.743753] ? sock_free_inode+0x20/0x20 [ 1095.744090] alloc_inode+0x63/0x240 [ 1095.744397] new_inode_pseudo+0x14/0xe0 [ 1095.744728] sock_alloc+0x3c/0x270 [ 1095.745024] __sock_create+0xbd/0x7f0 [ 1095.745350] ? wait_for_completion_io+0x270/0x270 [ 1095.745748] __sys_socket+0xef/0x200 [ 1095.746055] ? fput_many+0x2f/0x1a0 [ 1095.746359] ? move_addr_to_kernel+0x70/0x70 [ 1095.746722] ? ksys_write+0x1a9/0x260 [ 1095.747041] ? __ia32_sys_read+0xb0/0xb0 [ 1095.747386] __x64_sys_socket+0x6f/0xb0 [ 1095.747715] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.748151] do_syscall_64+0x33/0x40 [ 1095.748461] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1095.748884] RIP: 0033:0x7f11962ec197 [ 1095.749200] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.750703] RSP: 002b:00007f119385f0c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029 [ 1095.751330] RAX: ffffffffffffffda RBX: 00007f11963fdf60 RCX: 00007f11962ec197 [ 1095.751915] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1095.752500] RBP: 00007f11938601d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.753081] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001 [ 1095.753670] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000 [ 1095.754527] socket: no more sockets 00:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/100) 00:18:15 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:18:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x17, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d9f4655fd9f4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31393837353733353000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f6cc41a12f9c46cca550405a7e081d32010000000c00000000000000d9f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002e00000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000003000000040000006a000f000300040000000000000000000f00bc0f", 0x20, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d9f4655fd9f4655fd9f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d9f4655fd9f4655fd9f4655f00000000000004000400000000000000050000000800"/64, 0x40, 0x2100}, {&(0x7f0000011700)="20000000d817509bd817509b00000000d9f4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="c041000000380000d9f4655fd9f4655fd9f4655f00000000000002001c0000000000000000000000090000000a0000000b0000000c0000000d0000000e0000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d9f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2a00}, {&(0x7f0000011900)="ed4100003c000000d9f4655fd9f4655fd9f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c653100000000000000000000000000000000000000000000000000000045361a1200000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2b00}, {&(0x7f0000011a00)="ed8100001a040000d9f4655fd9f4655fd9f4655f0000000000000100040000000000000001000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e256bd9800000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011b00)="ffa1000026000000d9f4655fd9f4655fd9f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3139383735373335302f66696c65302f66696c653000000000000000000000000000000000000000000000bed590d700000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000", 0xa0, 0x2d00}, {&(0x7f0000011c00)="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", 0x1a0, 0x2e00}, {&(0x7f0000011e00)="ed81000064000000d9f4655fd9f4655fd9f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c00a907bc00000000000000000000000000000000000000000000000020000000d817509bd817509bd817509bd9f4655fd817509b0000000000000000000002ea040734000000000028000000000000006461746100000000000000000000000000000000000000000000000000000000000000006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273", 0x100, 0x3000}, {&(0x7f0000011f00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000012000)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x4800}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x6800}, {&(0x7f0000012500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x7800}, {&(0x7f0000012700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8000}], 0x0, &(0x7f0000012c00)) 00:18:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x125001, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f00000000c0)=0x2) preadv(r0, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000180)=""/156, 0x9c}], 0x2, 0xfff, 0x1) preadv(r1, &(0x7f0000000840)=[{&(0x7f0000000340)=""/208, 0xd0}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x9, 0xfffffff9, 0x129) r2 = syz_io_uring_setup(0x20, &(0x7f0000000180), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) splice(r2, &(0x7f0000000280)=0x2, 0xffffffffffffffff, &(0x7f0000000300)=0x7, 0x3, 0x3) 00:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (fail_nth: 1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000240)=""/140) 00:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/100) [ 1095.782657] FAULT_INJECTION: forcing a failure. [ 1095.782657] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1095.783741] CPU: 0 PID: 413594 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1095.784318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.785002] Call Trace: [ 1095.785245] dump_stack+0x107/0x167 [ 1095.785541] should_fail.cold+0x5/0xa [ 1095.785870] _copy_from_user+0x2e/0x1b0 [ 1095.786212] __copy_msghdr_from_user+0x91/0x4b0 [ 1095.786600] ? __ia32_sys_shutdown+0x80/0x80 [ 1095.786968] ? perf_trace_lock+0xac/0x490 [ 1095.787316] ? __lock_acquire+0x1657/0x5b00 [ 1095.787676] ? __lock_acquire+0xbb1/0x5b00 [ 1095.788032] sendmsg_copy_msghdr+0xa1/0x160 [ 1095.788393] ? do_recvmmsg+0x6d0/0x6d0 [ 1095.788718] ? perf_trace_lock+0xac/0x490 [ 1095.789061] ? __lockdep_reset_lock+0x180/0x180 [ 1095.789454] ? perf_trace_lock+0xac/0x490 [ 1095.789802] ___sys_sendmsg+0xc6/0x170 [ 1095.790128] ? sendmsg_copy_msghdr+0x160/0x160 [ 1095.790512] ? __fget_files+0x26d/0x4c0 [ 1095.790845] ? lock_downgrade+0x6d0/0x6d0 [ 1095.791197] ? find_held_lock+0x2c/0x110 [ 1095.791540] ? __fget_files+0x296/0x4c0 [ 1095.791875] ? __fget_light+0xea/0x290 [ 1095.792199] __sys_sendmsg+0xe5/0x1b0 [ 1095.792517] ? __sys_sendmsg_sock+0x40/0x40 [ 1095.792872] ? rcu_read_lock_any_held+0x75/0xa0 [ 1095.793265] ? fput_many+0x2f/0x1a0 [ 1095.793568] ? ksys_write+0x1a9/0x260 [ 1095.793886] ? __ia32_sys_read+0xb0/0xb0 [ 1095.794228] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.794665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.795092] ? trace_hardirqs_on+0x5b/0x180 [ 1095.795452] do_syscall_64+0x33/0x40 [ 1095.795762] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1095.796187] RIP: 0033:0x7f704601bb19 [ 1095.796497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.798034] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.798666] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1095.799252] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1095.799836] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.800421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.801008] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 00:18:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000240)=""/140) 00:18:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (fail_nth: 1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:15 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1095.837420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.849332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.853709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.864732] FAULT_INJECTION: forcing a failure. [ 1095.864732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.866632] CPU: 1 PID: 413625 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1095.867688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1095.868919] Call Trace: [ 1095.869325] dump_stack+0x107/0x167 [ 1095.869872] should_fail.cold+0x5/0xa [ 1095.870442] _copy_from_user+0x2e/0x1b0 [ 1095.871048] get_timespec64+0x75/0x190 [ 1095.871625] ? put_timespec64+0x130/0x130 [ 1095.872244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1095.872938] ? vfs_write+0x354/0xa70 [ 1095.873506] __x64_sys_nanosleep+0xaa/0x2a0 [ 1095.874142] ? hrtimer_nanosleep+0x5d0/0x5d0 [ 1095.874798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1095.875573] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1095.876352] do_syscall_64+0x33/0x40 [ 1095.876900] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1095.877647] RIP: 0033:0x7f1d0d4ffb19 [ 1095.878192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1095.880850] RSP: 002b:00007f1d0aa75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 1095.881961] RAX: ffffffffffffffda RBX: 00007f1d0d612f60 RCX: 00007f1d0d4ffb19 [ 1095.882985] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 1095.884010] RBP: 00007f1d0aa751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.885037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.886066] R13: 00007ffc91f780af R14: 00007f1d0aa75300 R15: 0000000000022000 00:18:15 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1095.937849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.949372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:15 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:18:15 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:18:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000000c0)=""/100) 00:18:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}}, 0x0) 00:18:15 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 00:18:15 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 00:18:15 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup3(r1, r0, 0x0) 00:18:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x3}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:16 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, &(0x7f0000000140)="dafb376c617c7c58f191883a") ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f01", @ANYRES16=r4, @ANYBLOB="000400000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="a0002a00dd9a750a1455056ee8b7b8bb484e1c871a998d1e6c5f819adc69d7fec4b2c9ab677aec1a610d0b52304e58bd3fac856b3adbe7b41d5578f3ed4ec3be097db14af014eef0d7c41741b09163b5b8baafd9a2cd2d832e08a3f1fbddd31ef90ff81cb8c7bcb0304a51cdfca1bb46606225751e467e1d0902e494ab183ade"], 0x11c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, &(0x7f000000b180)={&(0x7f000000b0c0)="f365400faf54bb8dc483056990d6ba1a230566660f6d7900c423697e730dfe266665450f9b56008444870ac4e2fd069e09000000c44261f77508660f38f65311f24a0faef7", 0x0, 0x0}, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) fallocate(r6, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) 00:18:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:16 executing program 5: syz_emit_ethernet(0xb6, &(0x7f0000000180)=ANY=[@ANYBLOB="018002000000aaaaaaaaaa0286dd600020010000000000000000000000000000ff0200000000000000000000000000013205000000000000c204"], 0x0) 00:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) (fail_nth: 2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup3(r1, r0, 0x0) 00:18:16 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x4040000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x810, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1096.301687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.303594] FAULT_INJECTION: forcing a failure. [ 1096.303594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.305372] CPU: 1 PID: 414232 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1096.306375] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.307558] Call Trace: [ 1096.307957] dump_stack+0x107/0x167 [ 1096.308503] should_fail.cold+0x5/0xa [ 1096.309079] _copy_from_user+0x2e/0x1b0 [ 1096.309687] iovec_from_user+0x141/0x400 [ 1096.310299] __import_iovec+0x67/0x590 [ 1096.310875] ? __ia32_sys_shutdown+0x80/0x80 [ 1096.311513] ? perf_trace_lock+0xac/0x490 [ 1096.312123] import_iovec+0x83/0xb0 [ 1096.312660] sendmsg_copy_msghdr+0x131/0x160 [ 1096.313305] ? do_recvmmsg+0x6d0/0x6d0 [ 1096.313868] ? perf_trace_lock+0xac/0x490 [ 1096.314477] ? __lockdep_reset_lock+0x180/0x180 [ 1096.314889] FAULT_INJECTION: forcing a failure. [ 1096.314889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.315145] ? perf_trace_lock+0xac/0x490 [ 1096.315173] ___sys_sendmsg+0xc6/0x170 [ 1096.315203] ? sendmsg_copy_msghdr+0x160/0x160 [ 1096.315226] ? __fget_files+0x26d/0x4c0 [ 1096.318759] ? lock_downgrade+0x6d0/0x6d0 [ 1096.319358] ? find_held_lock+0x2c/0x110 [ 1096.319954] ? __fget_files+0x296/0x4c0 [ 1096.320539] ? __fget_light+0xea/0x290 [ 1096.321110] __sys_sendmsg+0xe5/0x1b0 [ 1096.321667] ? __sys_sendmsg_sock+0x40/0x40 [ 1096.322291] ? rcu_read_lock_any_held+0x75/0xa0 [ 1096.322965] ? fput_many+0x2f/0x1a0 [ 1096.323492] ? ksys_write+0x1a9/0x260 [ 1096.324053] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.324817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.325569] ? trace_hardirqs_on+0x5b/0x180 [ 1096.326196] do_syscall_64+0x33/0x40 [ 1096.326734] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1096.327496] RIP: 0033:0x7f704601bb19 [ 1096.328038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1096.330665] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1096.331757] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1096.332777] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1096.333801] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.334823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.335850] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1096.336894] CPU: 0 PID: 414236 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1096.337497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1096.338182] Call Trace: [ 1096.338414] dump_stack+0x107/0x167 [ 1096.338719] should_fail.cold+0x5/0xa [ 1096.339039] _copy_to_user+0x2e/0x180 [ 1096.339362] simple_read_from_buffer+0xcc/0x160 [ 1096.339756] proc_fail_nth_read+0x198/0x230 [ 1096.340119] ? proc_sessionid_read+0x230/0x230 [ 1096.340496] ? security_file_permission+0x24e/0x570 [ 1096.340909] ? perf_trace_initcall_start+0x101/0x380 [ 1096.341341] ? proc_sessionid_read+0x230/0x230 [ 1096.341719] vfs_read+0x228/0x580 [ 1096.342013] ksys_read+0x12d/0x260 [ 1096.342309] ? vfs_write+0xa70/0xa70 [ 1096.342624] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1096.343066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1096.343499] do_syscall_64+0x33/0x40 [ 1096.343811] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1096.344236] RIP: 0033:0x7f1d0d4b269c [ 1096.344549] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1096.346072] RSP: 002b:00007f1d0aa75170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1096.346702] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d0d4b269c [ 1096.347289] RDX: 000000000000000f RSI: 00007f1d0aa751e0 RDI: 0000000000000004 [ 1096.347875] RBP: 00007f1d0aa751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1096.348469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.349068] R13: 00007ffc91f780af R14: 00007f1d0aa75300 R15: 0000000000022000 [ 1096.353594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.364955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.368758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:16 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x12, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000012200)}], 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x30, 0x1c, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0}]}, 0x30}}, 0x0) 00:18:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup3(r1, r0, 0x0) [ 1096.429161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:16 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000000)={[{@mode}]}) 00:18:16 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) dup3(r1, r0, 0x0) 00:18:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) [ 1096.613754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1096.629447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:16 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:16 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x9}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:16 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 3) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@pspoll={{}, @default, @from_mac, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2a7) syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000380)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7ffd}, @device_b, @initial, @device_b, {0x9, 0x6}}, {0x4, 0x1, 0x1, 0x0, 0x5}}, {@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_a, @initial, {0x2, 0xff}, @broadcast}, {0x9, 0x0, 0x3, 0x1, 0x7}}}, @a_msdu=[{@device_b, @broadcast, 0x68, "99a09c498e1cea10b1debb73f2d45d70a9734360d1e9b6d66450595e7a54d30cfdfa25af0a6929092efd27792a3a2774783a1f74d712597aa4dab089bf41378178f46985a76ab653c13680a6e1e3991067d803e072f56812b3ef0c6ad8b0e9f50ffe1d67ce19f8bc"}, {@broadcast, @device_a, 0x2f, "3a07d62ce4b3cee24ec83d492f0f43b853c2784a78bde26931fcef5fcef31abacf557f0b1cd9c155abb1ee164affa9"}, {@device_a, @device_b, 0xa5, "00cf5cb622320b2502d870368c4e70a076b8b852dbfc35c8a826f846cd4c739d0281c9dffddebbc458aa85bbe8a27196323cedf1876248211fa8edd777f676895db76fa8054716c83c99c4af79bfb1daf70ccec11acadbab176ff60b4b1f08c174c5ce4c187e09bef257a0774728128ef61175646a062499d704684d28c4625c48f3fbe10452a52b3c84bc8a6cd9dfc5f5d828f14c5d6cc023a01efa2926d212a734c2bfa2"}]}, 0x1a6) 00:18:16 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, &(0x7f0000000140)="dafb376c617c7c58f191883a") ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f01", @ANYRES16=r4, @ANYBLOB="000400000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="a0002a00dd9a750a1455056ee8b7b8bb484e1c871a998d1e6c5f819adc69d7fec4b2c9ab677aec1a610d0b52304e58bd3fac856b3adbe7b41d5578f3ed4ec3be097db14af014eef0d7c41741b09163b5b8baafd9a2cd2d832e08a3f1fbddd31ef90ff81cb8c7bcb0304a51cdfca1bb46606225751e467e1d0902e494ab183ade"], 0x11c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, &(0x7f000000b180)={&(0x7f000000b0c0)="f365400faf54bb8dc483056990d6ba1a230566660f6d7900c423697e730dfe266665450f9b56008444870ac4e2fd069e09000000c44261f77508660f38f65311f24a0faef7", 0x0, 0x0}, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) fallocate(r6, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) 00:18:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) [ 1097.002302] FAULT_INJECTION: forcing a failure. [ 1097.002302] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.003305] CPU: 0 PID: 414772 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1097.003893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.004614] Call Trace: [ 1097.004847] dump_stack+0x107/0x167 [ 1097.005166] should_fail.cold+0x5/0xa [ 1097.005506] ? __alloc_skb+0x6d/0x5b0 [ 1097.005836] should_failslab+0x5/0x20 [ 1097.006166] kmem_cache_alloc_node+0x55/0x330 [ 1097.006548] ? lock_downgrade+0x6d0/0x6d0 [ 1097.006902] __alloc_skb+0x6d/0x5b0 [ 1097.007220] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1097.007691] netlink_sendmsg+0x998/0xdf0 [ 1097.008043] ? netlink_unicast+0x7f0/0x7f0 [ 1097.008412] ? netlink_unicast+0x7f0/0x7f0 [ 1097.008782] __sock_sendmsg+0x154/0x190 [ 1097.009124] ____sys_sendmsg+0x70d/0x870 [ 1097.009484] ? sock_write_iter+0x3d0/0x3d0 [ 1097.009843] ? do_recvmmsg+0x6d0/0x6d0 [ 1097.010175] ? perf_trace_lock+0xac/0x490 [ 1097.010535] ? __lockdep_reset_lock+0x180/0x180 [ 1097.010936] ? perf_trace_lock+0xac/0x490 [ 1097.011304] ___sys_sendmsg+0xf3/0x170 [ 1097.011635] ? sendmsg_copy_msghdr+0x160/0x160 [ 1097.012028] ? lock_downgrade+0x6d0/0x6d0 [ 1097.012390] ? find_held_lock+0x2c/0x110 [ 1097.012745] ? __fget_files+0x296/0x4c0 [ 1097.013098] ? __fget_light+0xea/0x290 [ 1097.013450] __sys_sendmsg+0xe5/0x1b0 [ 1097.013782] ? __sys_sendmsg_sock+0x40/0x40 [ 1097.014162] ? rcu_read_lock_any_held+0x75/0xa0 [ 1097.014576] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.015024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.015472] ? trace_hardirqs_on+0x5b/0x180 [ 1097.015845] do_syscall_64+0x33/0x40 [ 1097.016169] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1097.016605] RIP: 0033:0x7f704601bb19 [ 1097.016931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.018483] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.019135] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1097.019748] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1097.020354] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.020951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.021566] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1097.027971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) [ 1097.059416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.070124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.078183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.085128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.088494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.092347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.116723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) [ 1097.137253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.140811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:17 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:17 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) write$P9_RCLUNK(r1, &(0x7f0000000040)={0xffffffffffffff28}, 0xff05) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) splice(r2, 0x0, r0, 0x0, 0x5, 0xa) 00:18:17 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r0, 0x0, 0x0, 0x1) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) openat(r1, &(0x7f0000000200)='./file1\x00', 0xb00, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 00:18:17 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, &(0x7f0000000140)="dafb376c617c7c58f191883a") ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f01", @ANYRES16=r4, @ANYBLOB="000400000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="a0002a00dd9a750a1455056ee8b7b8bb484e1c871a998d1e6c5f819adc69d7fec4b2c9ab677aec1a610d0b52304e58bd3fac856b3adbe7b41d5578f3ed4ec3be097db14af014eef0d7c41741b09163b5b8baafd9a2cd2d832e08a3f1fbddd31ef90ff81cb8c7bcb0304a51cdfca1bb46606225751e467e1d0902e494ab183ade"], 0x11c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, &(0x7f000000b180)={&(0x7f000000b0c0)="f365400faf54bb8dc483056990d6ba1a230566660f6d7900c423697e730dfe266665450f9b56008444870ac4e2fd069e09000000c44261f77508660f38f65311f24a0faef7", 0x0, 0x0}, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) fallocate(r6, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) 00:18:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x50}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:17 executing program 2: syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000140)="1a", 0x1, 0x739b}, {&(0x7f0000000180)='2', 0x1}, {&(0x7f00000001c0)='W', 0x1}], 0x0, 0x0) [ 1097.501638] FAULT_INJECTION: forcing a failure. [ 1097.501638] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.502643] CPU: 0 PID: 415289 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1097.503227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1097.503914] Call Trace: [ 1097.504143] dump_stack+0x107/0x167 [ 1097.504450] should_fail.cold+0x5/0xa [ 1097.504773] ? create_object.isra.0+0x3a/0xa20 [ 1097.505154] should_failslab+0x5/0x20 [ 1097.505480] kmem_cache_alloc+0x5b/0x310 [ 1097.505821] ? find_held_lock+0x2c/0x110 [ 1097.506162] create_object.isra.0+0x3a/0xa20 [ 1097.506530] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1097.506954] kmem_cache_alloc_node+0x169/0x330 [ 1097.507339] ? lock_downgrade+0x6d0/0x6d0 [ 1097.507691] __alloc_skb+0x6d/0x5b0 [ 1097.508004] ? security_socket_getpeersec_dgram+0x8c/0xc0 [ 1097.508465] netlink_sendmsg+0x998/0xdf0 [ 1097.508811] ? netlink_unicast+0x7f0/0x7f0 [ 1097.509174] ? netlink_unicast+0x7f0/0x7f0 [ 1097.509535] __sock_sendmsg+0x154/0x190 [ 1097.509867] ____sys_sendmsg+0x70d/0x870 [ 1097.510210] ? sock_write_iter+0x3d0/0x3d0 [ 1097.510560] ? do_recvmmsg+0x6d0/0x6d0 [ 1097.510887] ? perf_trace_lock+0xac/0x490 [ 1097.511240] ? __lockdep_reset_lock+0x180/0x180 [ 1097.511627] ? perf_trace_lock+0xac/0x490 [ 1097.511978] ___sys_sendmsg+0xf3/0x170 [ 1097.512309] ? sendmsg_copy_msghdr+0x160/0x160 [ 1097.512694] ? lock_downgrade+0x6d0/0x6d0 [ 1097.513041] ? find_held_lock+0x2c/0x110 [ 1097.513395] ? __fget_files+0x296/0x4c0 [ 1097.513736] ? __fget_light+0xea/0x290 [ 1097.514065] __sys_sendmsg+0xe5/0x1b0 [ 1097.514384] ? __sys_sendmsg_sock+0x40/0x40 [ 1097.514747] ? rcu_read_lock_any_held+0x75/0xa0 [ 1097.515152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1097.515588] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1097.516016] ? trace_hardirqs_on+0x5b/0x180 [ 1097.516379] do_syscall_64+0x33/0x40 [ 1097.516693] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1097.517127] RIP: 0033:0x7f704601bb19 [ 1097.517450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1097.518968] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.519598] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1097.520187] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1097.520778] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.521375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.521967] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1097.534934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.556747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:17 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) [ 1097.578399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.619982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.634774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1097.636986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000000) [ 1097.686752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:17 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x60, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=unix,no']) 00:18:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000000) 00:18:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) 00:18:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000000) 00:18:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000001600)=0x4) 00:18:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x4000000) 00:18:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) 00:18:18 executing program 4: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, &(0x7f0000000140)="dafb376c617c7c58f191883a") ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f01", @ANYRES16=r4, @ANYBLOB="000400000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="a0002a00dd9a750a1455056ee8b7b8bb484e1c871a998d1e6c5f819adc69d7fec4b2c9ab677aec1a610d0b52304e58bd3fac856b3adbe7b41d5578f3ed4ec3be097db14af014eef0d7c41741b09163b5b8baafd9a2cd2d832e08a3f1fbddd31ef90ff81cb8c7bcb0304a51cdfca1bb46606225751e467e1d0902e494ab183ade"], 0x11c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, &(0x7f000000b180)={&(0x7f000000b0c0)="f365400faf54bb8dc483056990d6ba1a230566660f6d7900c423697e730dfe266665450f9b56008444870ac4e2fd069e09000000c44261f77508660f38f65311f24a0faef7", 0x0, 0x0}, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) fallocate(r6, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) 00:18:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 5) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x1d, &(0x7f0000000100)={0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) 00:18:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) 00:18:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x58}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1098.155738] FAULT_INJECTION: forcing a failure. [ 1098.155738] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.157497] CPU: 1 PID: 416234 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1098.158521] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.159720] Call Trace: [ 1098.160119] dump_stack+0x107/0x167 [ 1098.160657] should_fail.cold+0x5/0xa [ 1098.161233] should_failslab+0x5/0x20 [ 1098.161793] __kmalloc_node_track_caller+0x74/0x3b0 [ 1098.162520] ? netlink_sendmsg+0x998/0xdf0 [ 1098.163136] ? lock_downgrade+0x6d0/0x6d0 [ 1098.163743] __alloc_skb+0xb1/0x5b0 [ 1098.164377] netlink_sendmsg+0x998/0xdf0 [ 1098.164987] ? netlink_unicast+0x7f0/0x7f0 [ 1098.165636] ? netlink_unicast+0x7f0/0x7f0 [ 1098.166273] __sock_sendmsg+0x154/0x190 [ 1098.166863] ____sys_sendmsg+0x70d/0x870 [ 1098.167469] ? sock_write_iter+0x3d0/0x3d0 [ 1098.168096] ? do_recvmmsg+0x6d0/0x6d0 [ 1098.168670] ? perf_trace_lock+0xac/0x490 [ 1098.169300] ? __lockdep_reset_lock+0x180/0x180 [ 1098.169982] ? perf_trace_lock+0xac/0x490 [ 1098.170607] ___sys_sendmsg+0xf3/0x170 [ 1098.171183] ? sendmsg_copy_msghdr+0x160/0x160 [ 1098.171853] ? lock_downgrade+0x6d0/0x6d0 [ 1098.172476] ? find_held_lock+0x2c/0x110 [ 1098.173092] ? __fget_files+0x296/0x4c0 [ 1098.173702] ? __fget_light+0xea/0x290 [ 1098.174289] __sys_sendmsg+0xe5/0x1b0 [ 1098.174856] ? __sys_sendmsg_sock+0x40/0x40 [ 1098.175505] ? rcu_read_lock_any_held+0x75/0xa0 [ 1098.176211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.176990] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.177757] ? trace_hardirqs_on+0x5b/0x180 [ 1098.178398] do_syscall_64+0x33/0x40 [ 1098.178938] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1098.179680] RIP: 0033:0x7f704601bb19 [ 1098.180244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.182910] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.184026] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1098.185070] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1098.186113] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.187155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.188193] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1098.215641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.255235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.270736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.276935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.323977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 1098.363096] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 00:18:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) 00:18:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) 00:18:18 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x1301}], 0x1, 0x0, 0x0, 0x0) 00:18:18 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4", 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x52, 0xe21}, 0x14}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) open_tree(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x800) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000700000a00000000000000ff010000000000000000f50000000001000000ed0000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000006aab9c848249000000000000000000"], 0x110) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e850000, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r2}, 0x20f}, {{r3}, 0x800}, {{r0}, 0x1ff}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r4, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x101001) unshare(0x48020200) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) 00:18:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) 00:18:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 6) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1098.681602] FAULT_INJECTION: forcing a failure. [ 1098.681602] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.682738] CPU: 0 PID: 416577 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1098.683349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1098.684061] Call Trace: [ 1098.684297] dump_stack+0x107/0x167 [ 1098.684621] should_fail.cold+0x5/0xa [ 1098.684960] ? create_object.isra.0+0x3a/0xa20 [ 1098.685368] should_failslab+0x5/0x20 [ 1098.685697] kmem_cache_alloc+0x5b/0x310 [ 1098.686069] create_object.isra.0+0x3a/0xa20 [ 1098.686454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1098.686891] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1098.687325] ? netlink_sendmsg+0x998/0xdf0 [ 1098.687696] __alloc_skb+0xb1/0x5b0 [ 1098.688023] netlink_sendmsg+0x998/0xdf0 [ 1098.688378] ? netlink_unicast+0x7f0/0x7f0 [ 1098.688751] ? netlink_unicast+0x7f0/0x7f0 [ 1098.689123] __sock_sendmsg+0x154/0x190 [ 1098.689501] ____sys_sendmsg+0x70d/0x870 [ 1098.689865] ? sock_write_iter+0x3d0/0x3d0 [ 1098.690244] ? do_recvmmsg+0x6d0/0x6d0 [ 1098.690598] ? perf_trace_lock+0xac/0x490 [ 1098.690966] ? __lockdep_reset_lock+0x180/0x180 [ 1098.691369] ? perf_trace_lock+0xac/0x490 [ 1098.691730] ___sys_sendmsg+0xf3/0x170 [ 1098.692067] ? sendmsg_copy_msghdr+0x160/0x160 [ 1098.692479] ? lock_downgrade+0x6d0/0x6d0 [ 1098.692841] ? finish_task_switch+0x126/0x5d0 [ 1098.693246] ? lock_downgrade+0x6d0/0x6d0 [ 1098.693613] ? __fget_files+0x296/0x4c0 [ 1098.693969] ? __fget_light+0xea/0x290 [ 1098.694318] __sys_sendmsg+0xe5/0x1b0 [ 1098.694652] ? __sys_sendmsg_sock+0x40/0x40 [ 1098.695026] ? io_schedule_timeout+0x140/0x140 [ 1098.695432] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1098.695880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1098.696327] ? trace_hardirqs_on+0x5b/0x180 [ 1098.696705] do_syscall_64+0x33/0x40 [ 1098.697025] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1098.697473] RIP: 0033:0x7f704601bb19 [ 1098.697795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1098.699415] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1098.700084] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1098.700703] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1098.701323] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1098.701940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.702561] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 00:18:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')\'\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) [ 1098.739796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000002c0), 0x4a, 0x61bf, 0x2) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1c, 0xd38865185e4463b1, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x9e'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x30}}, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) [ 1098.756669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x65}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1098.794101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r2, 0x0, 0x0) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000300)=""/231) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000025c0)={0x1668, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x34c, 0x5, 0x0, 0x1, [{0x32c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x313}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb65}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0xcb0, 0x5, 0x0, 0x1, [{0x15c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1fe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x52f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x176}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xaab}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0x818, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x210, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcd1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2bb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ca}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe99f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x52}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf45d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x404, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x79}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffe9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x98}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4c00000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaf}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5008}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x309}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffeff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8c9e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7418}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x658, 0x5, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}]}, {0x3b4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xad}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}]}]}, {0x12c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7e8b}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}]}, 0x1668}, 0x1, 0x0, 0x0, 0x4040}, 0x2000c001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @random="3abca81d6249", {0x8, 0xb9}}, @ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @delba={0x3, 0x2, {{}, 0x31, {0xbd, 0x6}}}}, 0x2a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfa, 0x45}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @device_a, @random="482710ae1ebb", {0x8, 0xe0f}}, @ver_80211n={0x0, 0x7, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @void, @void, @val={0x3, 0x1, 0x8}, @val={0x2d, 0x1a, {0x20, 0x2, 0x4, 0x0, {0x1e51, 0x2, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x800, 0x5, 0x53}}, @void, [{0xdd, 0x38, "8e4acb22a3b858727a08955d74b308c780c39105a241da516ad87756349f635179d0a6ac4aa7ecc1b6d97cd1ffd720894c59eed2f944a284"}, {0xdd, 0x24, "09f8b36c7eac2de8ebb3c20e8ab5939a754001afa70004be1c5966148ffbadca21c8b946"}]}, 0x9b) [ 1098.895077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1098.907829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')\'\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) 00:18:18 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x3}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1098.989919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')\'\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) [ 1099.041231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.092558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.122489] FAULT_INJECTION: forcing a failure. [ 1099.122489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.123635] CPU: 1 PID: 416874 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1099.123643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.123647] Call Trace: [ 1099.123663] dump_stack+0x107/0x167 [ 1099.123675] should_fail.cold+0x5/0xa [ 1099.123692] _copy_from_iter_full+0x201/0xa60 [ 1099.123716] ? __virt_addr_valid+0x170/0x5c0 [ 1099.123740] ? __check_object_size+0x319/0x440 [ 1099.123766] netlink_sendmsg+0x879/0xdf0 [ 1099.123795] ? netlink_unicast+0x7f0/0x7f0 [ 1099.123827] ? netlink_unicast+0x7f0/0x7f0 [ 1099.123849] __sock_sendmsg+0x154/0x190 [ 1099.123871] ____sys_sendmsg+0x70d/0x870 [ 1099.123890] ? sock_write_iter+0x3d0/0x3d0 [ 1099.123899] ? do_recvmmsg+0x6d0/0x6d0 [ 1099.123911] ? perf_trace_lock+0xac/0x490 [ 1099.123925] ? __lockdep_reset_lock+0x180/0x180 [ 1099.123935] ? perf_trace_lock+0xac/0x490 [ 1099.123949] ___sys_sendmsg+0xf3/0x170 [ 1099.123962] ? sendmsg_copy_msghdr+0x160/0x160 [ 1099.123976] ? lock_downgrade+0x6d0/0x6d0 [ 1099.123989] ? find_held_lock+0x2c/0x110 [ 1099.124005] ? __fget_files+0x296/0x4c0 [ 1099.124026] ? __fget_light+0xea/0x290 [ 1099.124042] __sys_sendmsg+0xe5/0x1b0 [ 1099.124053] ? __sys_sendmsg_sock+0x40/0x40 [ 1099.124063] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.124085] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.124097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.124106] ? trace_hardirqs_on+0x5b/0x180 [ 1099.124120] do_syscall_64+0x33/0x40 [ 1099.124133] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1099.124141] RIP: 0033:0x7f704601bb19 00:18:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 00:18:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback=0x7f000008}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ')\'\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) [ 1099.124152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.124158] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.124171] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1099.124177] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1099.124183] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.124189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.124196] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1099.126544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.182403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 00:18:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 00:18:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0xd8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xaf, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}, @cf={0x4, 0x6, {0x7, 0x4, 0x0, 0x8}}, @fast_bss_trans={0x37, 0x8a, {0x81, 0x2, "0857554d0674b93d302842e83c38abce", "977fe708ccd6d17a2bf7949c10499309bc57c076ddf32000e6f30c733e65fc57", "d1303619bb3b1b5d5f524d4a947311d649d375ddc992c2e71ff6cb1fc3f9ffd2", [{0x2, 0x1c, "2ba04209eb8a5fe8727b700d83237b28f4278f709ef13ed644ac8dae"}, {0x2, 0x18, "7900866c6c7d929faf6c9575ab7dc288def1eba9673d5b06"}]}}, @peer_mgmt={0x75, 0x8, {0x0, 0x8000, @val=0x8, @val=0xc, @void}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="fb0b1e47b2c0"}]}, 0xd8}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_a, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xb2}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x1, 0x6, 0x7}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x56, 0xf2, 0x39, 0x8}}}, 0x52) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x40}, @broadcast, @device_b, @broadcast, {0x2, 0x1}, @device_b}, {0x6, 0x0, 0x1, 0x0, 0x9}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1}, {0x8}, @device_a, @initial, @from_mac=@device_b, {0x1, 0x3f}}, {0xc, 0x0, 0x0, 0x1, 0x9}}}, @a_msdu=[{@device_b, @broadcast, 0x40, "cbc25d5a9056e2c154b99feb009f0b22ff43d9218cece7feeb0fa034cf1a39386eeb9e5493c8fac79e4f99e3eb3d4770a5b9097fb1c28fa7dde80ec1dde1d834"}, {@device_b, @device_b, 0x1000, "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"}, {@broadcast, @device_b, 0xa2, "e455e07eaa676ead6a8501e866096febe877c27216fdb7d83238fbaf11eb415ce8f4eae3b93b4eb07e89cf6df0bd0a9cd7ad09944fd08886c23a163d15c2f92cda29aafe5dbde1c9f8d1cf3abe62a59d7e3ae38fead49eeaec4b0b711333fcc48f4bbb034af007cd9e74f1fa8e78493a6eb8a7b5c54d8d011a853fefb274be6eaf2f98bf66c9a7a9935977185b11b248ade1579c50b955d49ba964ff3ed78bb4ca13"}, {@device_a, @device_a, 0x2f, "bc0f09699bfeb19c079fc1f9a5597a97c1d290e69410d77088f3cc3d646a956f3bbee826542259e3f089fc71021a1d"}, {@broadcast, @broadcast}, {@broadcast, @device_b, 0x1000, "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"}, {@device_a, @device_b, 0x8f, "05e9993a5ab6c173ef1bf084bf2021056ed8ea204567e7c3644e36d82ca7ac540a0e903e35aa65ffbf521a64b2776a4b98c6f8e09e4ab440cde2a482777823377ea887c0d96f0d132859f971131561cc72998bd9efdf784bd56a33a63abc4af0f2ad6361298eebda0609afc02ede040878a5977d76ea44c943bbec8e05c7f69adfa01cd53a7df0b4de6bc0b822ff71"}, {@broadcast, @device_a, 0x16, "0d83482b66c00e1c3240989e74ada0d70bbb651b72ec"}, {@broadcast, @device_b, 0x97, "b79f8de79a93606983919305b1816f5ea4ba86b6c6b4aed6010394c41301d302fb0ca7d51c54cc8e166dc8171555b1b236112fcdb35dbb75a7d8c86029df1dd7851d1dc0641ed4dad24121e0663550f025857cba08d2efb6151db052e030f8a07e6c63491f4db2cb2811a2a62bf8fdadf88c7134c40d9a0a2f4ce8e2ae7c4049a4cf71a726fd198f903431864023568d317be7b46252ca"}]}, 0x2316) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r3, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8000) 00:18:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x4}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1099.535722] FAULT_INJECTION: forcing a failure. 00:18:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 8) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 1099.535722] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.536890] CPU: 1 PID: 417383 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1099.537626] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.538449] Call Trace: [ 1099.538744] dump_stack+0x107/0x167 [ 1099.539141] should_fail.cold+0x5/0xa [ 1099.539559] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1099.540270] should_failslab+0x5/0x20 [ 1099.540688] __kmalloc+0x72/0x390 [ 1099.541118] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1099.541819] genl_family_rcv_msg_doit+0xda/0x330 [ 1099.542334] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1099.543052] ? cap_capable+0x1cd/0x230 [ 1099.543486] ? security_capable+0x95/0xc0 [ 1099.543941] ? ns_capable+0xe2/0x110 [ 1099.544349] genl_rcv_msg+0x33c/0x5a0 [ 1099.544764] ? genl_get_cmd+0x480/0x480 [ 1099.545204] ? nl80211_send_scan_start+0x170/0x170 [ 1099.545752] ? lock_release+0x680/0x680 [ 1099.546191] ? __lockdep_reset_lock+0x180/0x180 [ 1099.546694] netlink_rcv_skb+0x14b/0x430 [ 1099.547135] ? genl_get_cmd+0x480/0x480 [ 1099.547568] ? netlink_ack+0xab0/0xab0 [ 1099.547999] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1099.548493] ? is_vmalloc_addr+0x7b/0xb0 [ 1099.548943] genl_rcv+0x24/0x40 [ 1099.549307] netlink_unicast+0x549/0x7f0 [ 1099.549753] ? netlink_attachskb+0x870/0x870 [ 1099.550247] netlink_sendmsg+0x90f/0xdf0 [ 1099.550690] ? netlink_unicast+0x7f0/0x7f0 [ 1099.551160] ? netlink_unicast+0x7f0/0x7f0 [ 1099.551616] __sock_sendmsg+0x154/0x190 [ 1099.552050] ____sys_sendmsg+0x70d/0x870 [ 1099.552492] ? sock_write_iter+0x3d0/0x3d0 [ 1099.552946] ? do_recvmmsg+0x6d0/0x6d0 [ 1099.553376] ? perf_trace_lock+0xac/0x490 [ 1099.553835] ? __lockdep_reset_lock+0x180/0x180 [ 1099.554337] ? perf_trace_lock+0xac/0x490 [ 1099.554793] ___sys_sendmsg+0xf3/0x170 [ 1099.555217] ? sendmsg_copy_msghdr+0x160/0x160 [ 1099.555719] ? lock_downgrade+0x6d0/0x6d0 [ 1099.556172] ? find_held_lock+0x2c/0x110 [ 1099.556626] ? __fget_files+0x296/0x4c0 [ 1099.557065] ? __fget_light+0xea/0x290 [ 1099.557503] __sys_sendmsg+0xe5/0x1b0 [ 1099.557916] ? __sys_sendmsg_sock+0x40/0x40 [ 1099.558393] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.558912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.559485] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.560050] ? trace_hardirqs_on+0x5b/0x180 [ 1099.560522] do_syscall_64+0x33/0x40 [ 1099.560926] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1099.561490] RIP: 0033:0x7f704601bb19 [ 1099.561901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.563869] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.564697] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1099.565475] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1099.566253] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.567018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.567818] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1099.584362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.592748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.597261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.600971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) stat(&(0x7f00000000c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) [ 1099.648411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 00:18:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x5}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:18:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 00:18:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 00:18:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/profiling', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_print_times', 0x0, 0x0) syz_io_uring_setup(0x747c, 0x0, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 00:18:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r3, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/231) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 9) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1099.957590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.959638] FAULT_INJECTION: forcing a failure. [ 1099.959638] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.960642] CPU: 1 PID: 417923 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1099.961221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.961890] Call Trace: [ 1099.962113] dump_stack+0x107/0x167 [ 1099.962413] should_fail.cold+0x5/0xa [ 1099.962727] ? create_object.isra.0+0x3a/0xa20 [ 1099.963097] should_failslab+0x5/0x20 [ 1099.963408] kmem_cache_alloc+0x5b/0x310 [ 1099.963741] create_object.isra.0+0x3a/0xa20 [ 1099.964101] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1099.964516] __kmalloc+0x16e/0x390 [ 1099.964814] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1099.965337] genl_family_rcv_msg_doit+0xda/0x330 [ 1099.965726] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1099.966262] ? cap_capable+0x1cd/0x230 [ 1099.966581] ? security_capable+0x95/0xc0 [ 1099.966923] ? ns_capable+0xe2/0x110 [ 1099.967228] genl_rcv_msg+0x33c/0x5a0 [ 1099.967542] ? genl_get_cmd+0x480/0x480 [ 1099.967867] ? nl80211_send_scan_start+0x170/0x170 [ 1099.968268] ? lock_release+0x680/0x680 [ 1099.968590] ? __lockdep_reset_lock+0x180/0x180 [ 1099.968973] netlink_rcv_skb+0x14b/0x430 [ 1099.969312] ? genl_get_cmd+0x480/0x480 [ 1099.969638] ? netlink_ack+0xab0/0xab0 [ 1099.969961] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1099.970330] ? is_vmalloc_addr+0x7b/0xb0 [ 1099.970666] genl_rcv+0x24/0x40 [ 1099.970934] netlink_unicast+0x549/0x7f0 [ 1099.971269] ? netlink_attachskb+0x870/0x870 [ 1099.971635] netlink_sendmsg+0x90f/0xdf0 [ 1099.971966] ? netlink_unicast+0x7f0/0x7f0 [ 1099.972315] ? netlink_unicast+0x7f0/0x7f0 [ 1099.972659] __sock_sendmsg+0x154/0x190 [ 1099.972987] ____sys_sendmsg+0x70d/0x870 [ 1099.972994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.974052] ? sock_write_iter+0x3d0/0x3d0 [ 1099.974394] ? do_recvmmsg+0x6d0/0x6d0 [ 1099.974712] ? perf_trace_lock+0xac/0x490 [ 1099.975053] ? __lockdep_reset_lock+0x180/0x180 [ 1099.975429] ? perf_trace_lock+0xac/0x490 [ 1099.975770] ___sys_sendmsg+0xf3/0x170 [ 1099.976092] ? sendmsg_copy_msghdr+0x160/0x160 [ 1099.976471] ? lock_downgrade+0x6d0/0x6d0 [ 1099.976812] ? find_held_lock+0x2c/0x110 [ 1099.977150] ? __fget_files+0x296/0x4c0 [ 1099.977483] ? __fget_light+0xea/0x290 [ 1099.977810] __sys_sendmsg+0xe5/0x1b0 [ 1099.978125] ? __sys_sendmsg_sock+0x40/0x40 [ 1099.978481] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.978870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.979299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.979727] ? trace_hardirqs_on+0x5b/0x180 [ 1099.980082] do_syscall_64+0x33/0x40 [ 1099.980385] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1099.980559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1099.980806] RIP: 0033:0x7f704601bb19 [ 1099.981897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.983392] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.984008] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1099.984586] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1099.985169] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.985752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.986336] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 00:18:19 executing program 2: futex(0x0, 0xc, 0x0, 0x0, 0x0, 0x0) [ 1100.015228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x143082) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r1, r0, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) [ 1100.020076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.043522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 00:18:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:20 executing program 2: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cabd15439f170e429dd5057d7d5db566fc9e481b1128bce328ef44be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f03511a4dfbfc96803b89f8efb3de820ef8e9bd306955000037976789cf995521a65b9192b2dde0498242f304269068"], 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000001010300000000000000000000660001000600124000000000"], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r1, &(0x7f0000000000), 0x5ac, 0x0, 0x0) 00:18:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/4126, 0x101e, 0x0) 00:18:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x6}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="98d29ec550d05526bf59ec4b3451ce6711994df50358290ed409b6961676ae5aec7a9fca7cf11eb6c35fbd91a50bf34fc9e3f11b0e9eae6389aa1e31fa177ef05085fdc4d21dfc1482fccde630339d7bfffe") 00:18:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="340000001000010000000010000000000000000005000000000000000c00008008000d00ac1414000c0004000005"], 0x34}}, 0x0) 00:18:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x1b, @random="e8f77665cd7ace47d91da67a4016008de1b5340cc158be0af79f21"}, @val={0x1, 0x3, [{0x60, 0x1}, {0x36, 0x1}, {0x3, 0x1}]}, @void, @void, @void, @val={0x5, 0x23, {0x40, 0x2f, 0x6, "a4b9e5599e9a6b640eb379d601134766132372d97277e8ee3d070b015963a77f"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x73) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1100.383329] netlink: 'syz-executor.6': attribute type 4 has an invalid length. [ 1100.387183] mac80211_hwsim hwsim14 wlan1: refused to change device tx_queue_len [ 1100.388126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1100.403650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.410596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.417290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) 00:18:20 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000007c0)=@updsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in6=@empty}}]}, 0x164}}, 0x0) [ 1100.435687] FAULT_INJECTION: forcing a failure. [ 1100.435687] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.436927] CPU: 0 PID: 418185 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1100.437638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.438461] Call Trace: [ 1100.438749] dump_stack+0x107/0x167 [ 1100.439144] should_fail.cold+0x5/0xa [ 1100.439552] ? __alloc_skb+0x6d/0x5b0 [ 1100.439976] should_failslab+0x5/0x20 [ 1100.440371] kmem_cache_alloc_node+0x55/0x330 [ 1100.440830] __alloc_skb+0x6d/0x5b0 [ 1100.441198] ? genl_rcv_msg+0x33c/0x5a0 [ 1100.441605] netlink_ack+0x1ed/0xab0 [ 1100.441990] ? nl80211_send_scan_start+0x170/0x170 [ 1100.442481] ? netlink_sendmsg+0xdf0/0xdf0 [ 1100.442906] ? lock_release+0x680/0x680 [ 1100.443306] ? __lockdep_reset_lock+0x180/0x180 [ 1100.443779] netlink_rcv_skb+0x348/0x430 [ 1100.444183] ? genl_get_cmd+0x480/0x480 [ 1100.444583] ? netlink_ack+0xab0/0xab0 [ 1100.444984] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1100.445453] ? is_vmalloc_addr+0x7b/0xb0 [ 1100.445867] genl_rcv+0x24/0x40 [ 1100.446205] netlink_unicast+0x549/0x7f0 [ 1100.446619] ? netlink_attachskb+0x870/0x870 [ 1100.447073] netlink_sendmsg+0x90f/0xdf0 [ 1100.447484] ? netlink_unicast+0x7f0/0x7f0 [ 1100.447924] ? netlink_unicast+0x7f0/0x7f0 [ 1100.448355] __sock_sendmsg+0x154/0x190 [ 1100.448751] ____sys_sendmsg+0x70d/0x870 [ 1100.449169] ? sock_write_iter+0x3d0/0x3d0 [ 1100.449608] ? do_recvmmsg+0x6d0/0x6d0 [ 1100.450004] ? perf_trace_lock+0xac/0x490 [ 1100.450426] ? __lockdep_reset_lock+0x180/0x180 [ 1100.450892] ? perf_trace_lock+0xac/0x490 [ 1100.451309] ? SOFTIRQ_verbose+0x10/0x10 [ 1100.451717] ___sys_sendmsg+0xf3/0x170 [ 1100.452113] ? sendmsg_copy_msghdr+0x160/0x160 [ 1100.452577] ? lock_downgrade+0x6d0/0x6d0 [ 1100.453000] ? find_held_lock+0x2c/0x110 [ 1100.453430] ? __fget_files+0x296/0x4c0 [ 1100.453842] ? __fget_light+0xea/0x290 [ 1100.454252] __sys_sendmsg+0xe5/0x1b0 [ 1100.454635] ? __sys_sendmsg_sock+0x40/0x40 [ 1100.455064] ? rcu_read_lock_any_held+0x75/0xa0 [ 1100.455561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.456093] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.456609] ? trace_hardirqs_on+0x5b/0x180 [ 1100.457054] do_syscall_64+0x33/0x40 [ 1100.457438] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1100.457951] RIP: 0033:0x7f704601bb19 [ 1100.458329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.460141] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.460903] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1100.461617] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1100.462336] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.463038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.463745] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 00:18:20 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f0000000380)={0x0, 0x0, "b680db"}) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={[{@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@huge_advise}, {@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, 0xee01}}, {@size={'size', 0x3d, [0x35, 0x67, 0x31]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x0, 0x30, 0x38, 0x37, 0x30, 0x2d, 0x33, 0x37, 0x32]}}}}, {@huge_always}], [{@fowner_eq}]}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) [ 1100.526969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.540094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000600)={0x3060180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:18:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x7}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:20 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) [ 1100.620338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 1100.681790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.734217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 00:18:21 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 00:18:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 11) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}]}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000c, 0x810, r3, 0x2584a000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x54}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x44}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x20, 0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xfc}, @broadcast, @device_b, @from_mac=@device_b, {0xb, 0x3f}}, @ver_80211n={0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x2, 0x2f, 0x3000, 0xb72}}, @void, @void, @val={0x25, 0x3, {0x0, 0x3}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x9, 0x1, 0x14, 0x8}}}, 0x4f) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r4, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="6b0e46eb", @ANYRES16=r5, @ANYBLOB="0004000072000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xd0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r6, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:18:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x9}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1101.297761] FAULT_INJECTION: forcing a failure. [ 1101.297761] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.299580] CPU: 0 PID: 419276 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1101.300485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.301536] Call Trace: [ 1101.301878] dump_stack+0x107/0x167 [ 1101.302366] should_fail.cold+0x5/0xa [ 1101.302855] ? create_object.isra.0+0x3a/0xa20 [ 1101.303445] should_failslab+0x5/0x20 [ 1101.303928] kmem_cache_alloc+0x5b/0x310 [ 1101.304457] create_object.isra.0+0x3a/0xa20 [ 1101.305008] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1101.305678] kmem_cache_alloc_node+0x169/0x330 [ 1101.306271] __alloc_skb+0x6d/0x5b0 [ 1101.306746] ? genl_rcv_msg+0x33c/0x5a0 [ 1101.307278] netlink_ack+0x1ed/0xab0 [ 1101.307757] ? nl80211_send_scan_start+0x170/0x170 [ 1101.308382] ? netlink_sendmsg+0xdf0/0xdf0 [ 1101.308922] ? lock_release+0x680/0x680 [ 1101.309443] ? __lockdep_reset_lock+0x180/0x180 [ 1101.310039] netlink_rcv_skb+0x348/0x430 [ 1101.310567] ? genl_get_cmd+0x480/0x480 [ 1101.311078] ? netlink_ack+0xab0/0xab0 [ 1101.311592] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1101.312178] ? is_vmalloc_addr+0x7b/0xb0 [ 1101.312713] genl_rcv+0x24/0x40 [ 1101.313131] netlink_unicast+0x549/0x7f0 [ 1101.313669] ? netlink_attachskb+0x870/0x870 [ 1101.314248] netlink_sendmsg+0x90f/0xdf0 [ 1101.314784] ? netlink_unicast+0x7f0/0x7f0 [ 1101.315128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.315323] ? netlink_unicast+0x7f0/0x7f0 [ 1101.317209] __sock_sendmsg+0x154/0x190 [ 1101.317720] ____sys_sendmsg+0x70d/0x870 [ 1101.318251] ? sock_write_iter+0x3d0/0x3d0 [ 1101.318777] ? do_recvmmsg+0x6d0/0x6d0 [ 1101.319279] ? perf_trace_lock+0xac/0x490 [ 1101.319802] ? __lockdep_reset_lock+0x180/0x180 [ 1101.320395] ? perf_trace_lock+0xac/0x490 [ 1101.320936] ___sys_sendmsg+0xf3/0x170 [ 1101.321454] ? sendmsg_copy_msghdr+0x160/0x160 [ 1101.322045] ? lock_downgrade+0x6d0/0x6d0 [ 1101.322594] ? __fget_files+0x296/0x4c0 [ 1101.323124] ? __fget_light+0xea/0x290 [ 1101.323650] __sys_sendmsg+0xe5/0x1b0 [ 1101.324143] ? __sys_sendmsg_sock+0x40/0x40 [ 1101.324695] ? rcu_read_lock_any_held+0x75/0xa0 [ 1101.325311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1101.325987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1101.326652] ? trace_hardirqs_on+0x5b/0x180 [ 1101.327219] do_syscall_64+0x33/0x40 [ 1101.327697] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1101.328651] RIP: 0033:0x7f704601bb19 [ 1101.328667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.328676] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.328693] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1101.328702] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1101.328711] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.328720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1101.328729] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1101.335836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:21 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 00:18:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) [ 1101.473507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.500168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:21 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 00:18:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x53}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636455666768636a6b00000010002d00020100020202000000000000919d24b5e63e8cc18fa3523d7890124ad9d55c741ac363ad3b753e"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10) 00:18:21 executing program 5: sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f77000000200000000001000000080003"], 0x1c}}, 0x0) 00:18:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) [ 1101.663959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.699551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.715934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.720287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000140)) 00:18:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = perf_event_open(0x0, 0x0, 0x11, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0xee00, 0xee00) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0x140) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d0021bcb1f89888b62aff00040002000800170000000000"], 0x1c}}, 0x40000) 00:18:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:21 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 12) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1101.934146] FAULT_INJECTION: forcing a failure. [ 1101.934146] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.935658] CPU: 0 PID: 419713 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1101.936499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1101.937498] Call Trace: [ 1101.937830] dump_stack+0x107/0x167 [ 1101.938288] should_fail.cold+0x5/0xa [ 1101.938780] should_failslab+0x5/0x20 [ 1101.939265] __kmalloc_node_track_caller+0x74/0x3b0 [ 1101.939853] ? netlink_ack+0x1ed/0xab0 [ 1101.940336] __alloc_skb+0xb1/0x5b0 [ 1101.940777] netlink_ack+0x1ed/0xab0 [ 1101.941221] ? nl80211_send_scan_start+0x170/0x170 [ 1101.941808] ? netlink_sendmsg+0xdf0/0xdf0 [ 1101.942317] ? lock_release+0x680/0x680 [ 1101.942783] ? __lockdep_reset_lock+0x180/0x180 [ 1101.943335] netlink_rcv_skb+0x348/0x430 [ 1101.943813] ? genl_get_cmd+0x480/0x480 [ 1101.944288] ? netlink_ack+0xab0/0xab0 [ 1101.944754] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1101.945302] ? is_vmalloc_addr+0x7b/0xb0 [ 1101.945787] genl_rcv+0x24/0x40 [ 1101.946180] netlink_unicast+0x549/0x7f0 [ 1101.946666] ? netlink_attachskb+0x870/0x870 [ 1101.947188] netlink_sendmsg+0x90f/0xdf0 [ 1101.947676] ? netlink_unicast+0x7f0/0x7f0 [ 1101.948204] ? netlink_unicast+0x7f0/0x7f0 [ 1101.948697] __sock_sendmsg+0x154/0x190 [ 1101.949168] ____sys_sendmsg+0x70d/0x870 [ 1101.949667] ? sock_write_iter+0x3d0/0x3d0 [ 1101.950168] ? do_recvmmsg+0x6d0/0x6d0 [ 1101.950633] ? perf_trace_lock+0xac/0x490 [ 1101.951135] ? __lockdep_reset_lock+0x180/0x180 [ 1101.951685] ? perf_trace_lock+0xac/0x490 [ 1101.952183] ___sys_sendmsg+0xf3/0x170 [ 1101.952643] ? sendmsg_copy_msghdr+0x160/0x160 [ 1101.953192] ? lock_downgrade+0x6d0/0x6d0 [ 1101.953698] ? find_held_lock+0x2c/0x110 [ 1101.954182] ? __fget_files+0x296/0x4c0 [ 1101.954663] ? __fget_light+0xea/0x290 [ 1101.955133] __sys_sendmsg+0xe5/0x1b0 [ 1101.955577] ? __sys_sendmsg_sock+0x40/0x40 [ 1101.956104] ? rcu_read_lock_any_held+0x75/0xa0 [ 1101.956671] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1101.957299] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1101.957923] do_syscall_64+0x33/0x40 [ 1101.958371] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1101.958976] RIP: 0033:0x7f704601bb19 [ 1101.959425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1101.961542] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.962428] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1101.963254] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1101.964090] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1101.964909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1101.965760] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1101.985764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1101.994508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:22 executing program 5: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"]) unshare(0x48020200) 00:18:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2800018, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8529, 0x7, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0xea60}}) dup2(r1, r4) 00:18:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x65}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50001200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 00:18:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 13) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1102.509805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.524609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.525334] FAULT_INJECTION: forcing a failure. [ 1102.525334] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.527161] CPU: 0 PID: 420130 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1102.527937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1102.528853] Call Trace: [ 1102.529152] dump_stack+0x107/0x167 [ 1102.529573] should_fail.cold+0x5/0xa [ 1102.529996] ? create_object.isra.0+0x3a/0xa20 [ 1102.530515] should_failslab+0x5/0x20 [ 1102.530931] kmem_cache_alloc+0x5b/0x310 [ 1102.531394] create_object.isra.0+0x3a/0xa20 [ 1102.531895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1102.532467] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1102.533021] ? netlink_ack+0x1ed/0xab0 [ 1102.533476] __alloc_skb+0xb1/0x5b0 [ 1102.533881] netlink_ack+0x1ed/0xab0 [ 1102.534307] ? nl80211_send_scan_start+0x170/0x170 [ 1102.534843] ? netlink_sendmsg+0xdf0/0xdf0 [ 1102.535320] ? lock_release+0x680/0x680 [ 1102.535754] ? __lockdep_reset_lock+0x180/0x180 [ 1102.536271] netlink_rcv_skb+0x348/0x430 [ 1102.536712] ? genl_get_cmd+0x480/0x480 [ 1102.536956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.537153] ? netlink_ack+0xab0/0xab0 [ 1102.537174] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1102.537194] ? is_vmalloc_addr+0x7b/0xb0 [ 1102.539751] genl_rcv+0x24/0x40 [ 1102.540129] netlink_unicast+0x549/0x7f0 [ 1102.540587] ? netlink_attachskb+0x870/0x870 [ 1102.541149] netlink_sendmsg+0x90f/0xdf0 [ 1102.541612] ? netlink_unicast+0x7f0/0x7f0 [ 1102.542086] ? netlink_unicast+0x7f0/0x7f0 [ 1102.542553] __sock_sendmsg+0x154/0x190 [ 1102.542993] ____sys_sendmsg+0x70d/0x870 [ 1102.543441] ? sock_write_iter+0x3d0/0x3d0 [ 1102.543908] ? do_recvmmsg+0x6d0/0x6d0 [ 1102.544333] ? perf_trace_lock+0xac/0x490 [ 1102.544793] ? __lockdep_reset_lock+0x180/0x180 [ 1102.545327] ? perf_trace_lock+0xac/0x490 [ 1102.545794] ___sys_sendmsg+0xf3/0x170 [ 1102.546264] ? sendmsg_copy_msghdr+0x160/0x160 [ 1102.546815] ? lock_downgrade+0x6d0/0x6d0 [ 1102.547310] ? find_held_lock+0x2c/0x110 [ 1102.547753] ? __fget_files+0x296/0x4c0 [ 1102.548202] ? __fget_light+0xea/0x290 [ 1102.548642] __sys_sendmsg+0xe5/0x1b0 [ 1102.549065] ? __sys_sendmsg_sock+0x40/0x40 [ 1102.549559] ? rcu_read_lock_any_held+0x75/0xa0 [ 1102.550107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1102.550684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1102.551244] ? trace_hardirqs_on+0x5b/0x180 [ 1102.551776] do_syscall_64+0x33/0x40 [ 1102.552210] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1102.552844] RIP: 0033:0x7f704601bb19 [ 1102.553303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1102.555331] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1102.556230] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1102.557090] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1102.557876] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1102.558645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1102.559418] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1102.564085] Bluetooth: hci0: command 0x0c20 tx timeout [ 1102.570581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.600820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.615635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.622845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x65}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:22 executing program 0: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(r2, r1) 00:18:22 executing program 5: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"]) unshare(0x48020200) 00:18:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, @random=0x6, 0x508d, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @val={0x4, 0x6, {0x4, 0x7, 0xffe0, 0x7d}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x3e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 14) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2800018, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8529, 0x7, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0xea60}}) dup2(r1, r4) 00:18:22 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(r0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='./file0\x00') [ 1103.004782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.011281] FAULT_INJECTION: forcing a failure. [ 1103.011281] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.012441] CPU: 0 PID: 420638 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1103.013091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1103.013861] Call Trace: [ 1103.014112] dump_stack+0x107/0x167 [ 1103.014450] should_fail.cold+0x5/0xa [ 1103.014812] ? create_object.isra.0+0x3a/0xa20 [ 1103.015296] should_failslab+0x5/0x20 [ 1103.015631] kmem_cache_alloc+0x5b/0x310 [ 1103.015977] create_object.isra.0+0x3a/0xa20 [ 1103.016380] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1103.016828] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1103.017316] ? netlink_ack+0x1ed/0xab0 [ 1103.017683] __alloc_skb+0xb1/0x5b0 [ 1103.018022] netlink_ack+0x1ed/0xab0 [ 1103.018372] ? nl80211_send_scan_start+0x170/0x170 [ 1103.018838] ? netlink_sendmsg+0xdf0/0xdf0 [ 1103.019249] ? lock_release+0x680/0x680 [ 1103.019622] ? __lockdep_reset_lock+0x180/0x180 [ 1103.020062] netlink_rcv_skb+0x348/0x430 [ 1103.020439] ? genl_get_cmd+0x480/0x480 [ 1103.020810] ? netlink_ack+0xab0/0xab0 [ 1103.021195] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1103.021645] ? is_vmalloc_addr+0x7b/0xb0 [ 1103.022026] genl_rcv+0x24/0x40 [ 1103.022333] netlink_unicast+0x549/0x7f0 [ 1103.022718] ? netlink_attachskb+0x870/0x870 [ 1103.023139] netlink_sendmsg+0x90f/0xdf0 [ 1103.023530] ? netlink_unicast+0x7f0/0x7f0 [ 1103.023940] ? netlink_unicast+0x7f0/0x7f0 [ 1103.024338] __sock_sendmsg+0x154/0x190 [ 1103.024712] ____sys_sendmsg+0x70d/0x870 [ 1103.025096] ? sock_write_iter+0x3d0/0x3d0 [ 1103.025519] ? do_recvmmsg+0x6d0/0x6d0 [ 1103.025879] ? perf_trace_lock+0xac/0x490 [ 1103.026275] ? __lockdep_reset_lock+0x180/0x180 [ 1103.026709] ? perf_trace_lock+0xac/0x490 [ 1103.027110] ___sys_sendmsg+0xf3/0x170 [ 1103.027478] ? sendmsg_copy_msghdr+0x160/0x160 [ 1103.027910] ? lock_downgrade+0x6d0/0x6d0 [ 1103.028300] ? find_held_lock+0x2c/0x110 [ 1103.028702] ? __fget_files+0x296/0x4c0 [ 1103.029077] ? __fget_light+0xea/0x290 [ 1103.029458] __sys_sendmsg+0xe5/0x1b0 [ 1103.029818] ? __sys_sendmsg_sock+0x40/0x40 [ 1103.030226] ? rcu_read_lock_any_held+0x75/0xa0 [ 1103.030674] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1103.031168] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1103.031655] ? trace_hardirqs_on+0x5b/0x180 [ 1103.032072] do_syscall_64+0x33/0x40 [ 1103.032427] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1103.032912] RIP: 0033:0x7f704601bb19 [ 1103.033263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1103.034986] RSP: 002b:00007f7043591188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.035683] RAX: ffffffffffffffda RBX: 00007f704612ef60 RCX: 00007f704601bb19 [ 1103.036340] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1103.037012] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.037687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1103.038359] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 [ 1103.047876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x3ddc8cfb493e3995, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x7}]}, 0x28}}, 0x0) [ 1103.060858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.061488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.081296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.121491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12, 0x1, {0x0, r6}}, 0x7f) socket$inet6_udplite(0xa, 0x2, 0x88) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/57) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="0123000000239afe29001c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:18:23 executing program 0: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000540)='./file0/file0/file0\x00') 00:18:23 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000180)=@phonet={0x23, 0x8, 0x0, 0x3}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000200)="050300000013890000004c435ce0f87181858c75fee2e2e9818e5a65e027ed753d49d8fcb2a18956fd475167c74900c9f170abcef15a2646cc6bc18bc7ea42b0a819b9aa6d6e0a40de161036b057c609c453dcc0193484715e01a3cf7350060000007a6365dbffdfe98717e7ebe77c36cec6bce2ec8f103a63900770d3e65bceb99a05540bc374fa63951f3f5e61d7f3b8f42a0c424f365c06a2c48ceeb861cac60d331d245222b91db0251200a4f2cc23aee7fd9a8b8685a8a04640058f40daac729ebcd40ce8bfcd656d6026a9f2f3b9cd45a5025fa08711865a", 0xdb}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000000040)="48ececa623f93c92be9a6e93257ab0babd1fb22f46dc720ab5c759f3ec68c21c93a0e76d4460931dd01989fa0bf67e524b3fd8db26fc002ccac6d49e6d47d061bf15ce7e03e022448175b645e83f547424c2cd5fbd6d2274564307e3f6e390bcf1e7", 0x62}, {&(0x7f00000013c0)="d2987a03b1685fda3f8459b2c89bd84ac0e69b7a19e811b847a389072e56aab1f92864b608e35d83f0da021a229db0ebbe1775e1cd771158d931f966e7d60b8d5acc8d876c5d3033a102fb1a0dfe47199ee72b5ed48736c2f25f09da727f5d8f0266a4d144d84ffbd1b987345650f41cd26308bf861fea7053054f969f24cfaa7fc0994b593865bd11ee1c5f9ea95858ba63493642ce1814f9ee5be919f76a72f6fce9290e89308a3e1af6ba913e8e9a576fdb60106ab30f66", 0xb9}, {&(0x7f00000015c0)="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", 0x19e}], 0x5}, 0x0) 00:18:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2800018, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8529, 0x7, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0xea60}}) dup2(r1, r4) [ 1103.174234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:23 executing program 5: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"]) unshare(0x48020200) 00:18:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmmsg$unix(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}], 0x2, 0x0) 00:18:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) 00:18:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2800018, &(0x7f0000000240)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8529, 0x7, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_gettime(0x0, &(0x7f0000000080)) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(0xffffffffffffffff, 0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendfile(r3, r4, 0x0, 0xffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) fadvise64(r5, 0x0, 0x0, 0x4) futimesat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0xea60}}) dup2(r1, r4) 00:18:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xce5}, @device_a, @device_a, @random="9f61afdc8044", {0x7, 0x21}}, 0x4010, 0x36, @random=0xd4, @void, @void, [{0xdd, 0x62, "5ff0906c54e359817cf114c874f5b2167b70a9e7a971fb43500e9fd9692ea12f1ed8f478aa5e6e274ebb5b71e9db0eb1ade9f0a581aa520fbdc61bbb356e5c3c316f1f1f98635f9d6c58b7f42602be7f76124b3fb0e9ec82437761d7baf03fa31320"}, {0xdd, 0x8b, "f2546ff7198b45a5cd5d679aba582b3b83c409d707cbdf4c830c94c43cf01294932c1155b680f32149e2ac987af1bb4103e0d049fbc475e73735b87a56db31c09be06bfc1576a54c27017866a2f6f0fa9adefd15380cf3a39a4304bb023cf420cb79adde3fff1d870f00f476cb5d8532f2f367a62f1d83faa5c21b8d366579b8525115f8e186976db14b20"}, {0xdd, 0x4a, "4e28a15acf1cf7af9709f695aef3779b28edf49fae6cba185ff3de7892c60f8749f87924e9f2b6962501d76b0ca27613f1e679f09fff0500b32a6010f390cf17c4759b1c0626c61a6ba7"}]}, 0x15b) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12, 0x1, {0x0, r6}}, 0x7f) socket$inet6_udplite(0xa, 0x2, 0x88) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/57) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="0123000000239afe29001c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:18:23 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYRESHEX], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000280)='./file0\x00', 0x100, 0x400, 0x1}, 0x100) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40e00, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) 00:18:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) (fail_nth: 15) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:23 executing program 5: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076de76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d35294729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a3934ef8e4ccc48"]) unshare(0x48020200) 00:18:23 executing program 0: pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000100)) 00:18:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) [ 1103.577755] FAULT_INJECTION: forcing a failure. [ 1103.577755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.579233] CPU: 0 PID: 421477 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1103.579823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1103.580486] Call Trace: [ 1103.580705] dump_stack+0x107/0x167 [ 1103.581021] should_fail.cold+0x5/0xa [ 1103.581367] _copy_from_user+0x2e/0x1b0 [ 1103.581711] kstrtouint_from_user+0xbd/0x220 [ 1103.582067] ? kstrtou8_from_user+0x210/0x210 [ 1103.582394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.582436] ? lock_acquire+0x197/0x470 [ 1103.583517] ? ksys_write+0x12d/0x260 [ 1103.583858] proc_fail_nth_write+0x78/0x220 [ 1103.584238] ? proc_task_getattr+0x1f0/0x1f0 [ 1103.584626] ? __fget_files+0x296/0x4c0 [ 1103.584953] ? proc_task_getattr+0x1f0/0x1f0 [ 1103.585341] vfs_write+0x29a/0xa70 [ 1103.585493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.585657] ksys_write+0x12d/0x260 [ 1103.585673] ? __ia32_sys_read+0xb0/0xb0 [ 1103.587050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1103.587506] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1103.587957] do_syscall_64+0x33/0x40 [ 1103.588298] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1103.588746] RIP: 0033:0x7f7045fce5ff [ 1103.589072] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1103.589976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.590650] RSP: 002b:00007f7043591170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1103.590666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7045fce5ff [ 1103.590672] RDX: 0000000000000001 RSI: 00007f70435911e0 RDI: 0000000000000004 [ 1103.590679] RBP: 00007f70435911d0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.590685] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1103.590692] R13: 00007fff3cfdcf2f R14: 00007f7043591300 R15: 0000000000022000 00:18:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) [ 1103.637868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 00:18:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) [ 1103.717416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1103.738898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:23 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1e02, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1e02, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f00000003c0)) 00:18:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x2}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1103.803868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 00:18:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') close(r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) 00:18:23 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1104.091544] __nla_validate_parse: 4 callbacks suppressed [ 1104.091551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') 00:18:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12, 0x1, {0x0, r6}}, 0x7f) socket$inet6_udplite(0xa, 0x2, 0x88) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/57) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="0123000000239afe29001c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 00:18:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x3}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x0, @empty}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20000041) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r4, 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000300)=""/231) clock_gettime(0x0, &(0x7f0000005b40)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000005a00)=[{{&(0x7f0000000640), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/99, 0x63}], 0x1, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/180, 0xb4}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000001a00)=""/206, 0xce}], 0x5}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001c00)=""/246, 0xf6}, {&(0x7f00000006c0)=""/34, 0x22}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)=""/9, 0x9}, {&(0x7f0000002d80)=""/12, 0xc}, {&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002ec0)=""/227, 0xe3}], 0x8}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)=""/148, 0x94}, {&(0x7f0000003100)=""/180, 0xb4}, {&(0x7f00000031c0)=""/249, 0xf9}, {&(0x7f00000032c0)=""/190, 0xbe}, {&(0x7f0000003380)=""/247, 0xf7}, {&(0x7f0000002d00)=""/58, 0x3a}], 0x6, &(0x7f0000003540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="cb21d8ce"], 0x80}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/160, 0xa0}, {&(0x7f0000004700)=""/21, 0x15}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000005740)=""/93, 0x5d}, {&(0x7f00000057c0)=""/196, 0xc4}, {&(0x7f00000058c0)}], 0x7, &(0x7f0000005980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x5, 0x2100, &(0x7f0000005b80)={r5, r6+60000000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @default, 0x61, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x64ca5f57531ec51, 0x48}}, @void, @void, @void, @val={0x76, 0x6, {0xff, 0xfc, 0xd, 0x5}}}, 0x44) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r9 = accept$inet6(r7, &(0x7f0000003480)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000058c0)=0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000005bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000005dc0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "5be3912601b85c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000006dc0)={r10, r11, "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", "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"}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_b, @broadcast, @from_mac=@broadcast, {0x1, 0x2}}, @ver_80211n={0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x81}, @void, @val={0x72, 0x6}, @void}, 0x3e) 00:18:23 executing program 4: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:23 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='grpjquota=./file1,max_batch_time=0x00000000000006e2,usrjquota=,test_dummy_encryption,barrier=0x0000000000010000,delalloc,smackfsfloor=,hash,rootcontext=system_u,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) dup3(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='ext3\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) splice(r3, &(0x7f0000000180)=0xffffffff80000001, r0, &(0x7f00000001c0)=0xdb3c, 0x0, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000880)=""/4096, 0x1000) 00:18:23 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1104.109525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.111241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.115310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.119072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2fe1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000080)={0x6d}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') [ 1104.125391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 00:18:24 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='grpjquota=./file1,max_batch_time=0x00000000000006e2,usrjquota=,test_dummy_encryption,barrier=0x0000000000010000,delalloc,smackfsfloor=,hash,rootcontext=system_u,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) dup3(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='ext3\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) splice(r3, &(0x7f0000000180)=0xffffffff80000001, r0, &(0x7f00000001c0)=0xdb3c, 0x0, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000880)=""/4096, 0x1000) 00:18:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x4}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:24 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x4}, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 00:18:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') syz_io_uring_setup(0x4, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) pipe2(&(0x7f00000000c0), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12, 0x1, {0x0, r6}}, 0x7f) socket$inet6_udplite(0xa, 0x2, 0x88) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/57) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="0123000000239afe29001c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1104.300843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 4: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:24 executing program 0: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 1104.358837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.411573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.438575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:24 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='grpjquota=./file1,max_batch_time=0x00000000000006e2,usrjquota=,test_dummy_encryption,barrier=0x0000000000010000,delalloc,smackfsfloor=,hash,rootcontext=system_u,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) dup3(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='ext3\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) splice(r3, &(0x7f0000000180)=0xffffffff80000001, r0, &(0x7f00000001c0)=0xdb3c, 0x0, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000880)=""/4096, 0x1000) 00:18:24 executing program 0: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:24 executing program 4: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) [ 1104.482962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 6: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) [ 1104.498319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000001740)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x4c, "bb00ea1ad9112977235dd9e29d6bdc383957cafad3c4c402614c345472117c3b1114f166593b801358374de9d3fcb447f6da83e5b6baee7cc855c51f9b69189060f7436681ce761b63c1f9aa"}, {0xdd, 0xed, "a54c333aacd04ab83d4e2b4c78a87f9d6e1330375957047244a4943ac4a36fff1812da680bb1500ae0883f8c6a72403d15ce78f2cfc995e472c08359d7350b6baf49a7d80d2f782b8467abb307b36f4f12cec152c172d2eb39885e6c25caba7a6324a43d274db3b1e6ef332ba647a81704bb17b1654d31163ba677633a92cebe9af828e1df43f031ac4ff9b223beb4f5f2028c06b8d0d1ac64b890e67a38bc7ff9a392bd4c3b9632cdd8c44b6ca66d39c4d5baf99ba838e284e5424e5e4f0e6c6d06f2b2d479426b643332290601d89967c30deca6fd915a75d2939adf2817e85f5af758c98157505eb107f726"}, {0xdd, 0xbe, "6faedcaf86295fcaa9ccf62202ae39187cc44862b645825baed9e032ada9f50b7494309547f86b4aef879834d882b6e50e82ae9502fba0d5d7f27beccba3af92f2a12eeb6a59578ce1b5d79c65bae73ffa291f7589bb8d757e983c0c81ef9f2aec331446f0d5fe1b04514e04b274deb5adada1ec3275ab99563603e0961ebfa13b08d9bc735246156a707a2224c84f66068277cef4d71b55d475691901c3a0f9d01eb0d2f6d77a3123e1ba17765138016a5e97a0825d4b31e00f1c528186"}, {0xdd, 0xc4, "9b7324b9d81d0616a4a7c0918706699b6f7aaa95639c09b65bc94e62d0a87bbbf8a47b0ac106adae5d4c1931fc14c6e6baeaacb161d56303661e5baaf2518cb695db579977e658ee9d572af921d6e4098054a758978033ef72653fe8afab7cd47daf623bc86efa7f0cb2c2cf18862d44cb5f2b680cbc6eac3cbbeca6e9fff1f6227415ee3e7bb42e0e4064bfc858f789cd2514a12547d455377af638ced278a0f16d85f65832a9d84091e6512ddf4577206dc1163a8e3c6a309dc7ac31124dc9dee4fb43"}, {0xdd, 0xc7, "3dea70c783051dd8b31570e56dc45c269eaafce595640664357f7546978abb8e1558cf404e0d2e504377f6be016f02ff98ce94c1cae5a04ad02cb05912544884ba3f7c421d3b0042a28fd89b726d8904f64acf4d08399f0a25b221e0f8c67ad8b02ebe03e0308e4273e3da84bffaf2b3fda7106fd7e5f106c973c1a27d830e391b944d989466724b30495328932fa9b331b2e8c3d0665b9bbac479f04f9079041932c0c48ef71c1882c63083dc7e34d32db235b9c4a7b2eef152b80529f96632403fd69a14bed2"}, {0xdd, 0x11, "7a3d96468eda65350667ec641fc8a5667d"}]}, 0x3d5) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9c}}, './file0\x00'}) mq_timedsend(r3, &(0x7f0000000740)="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", 0x1000, 0x5, &(0x7f0000000100)={0x77359400}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:24 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) chown(&(0x7f0000000040)='./file0\x00', 0xee00, 0xffffffffffffffff) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [{}], {}, [], {0x10, 0x6}}, 0x2c, 0x0) mkdirat(r0, &(0x7f0000000240)='./file2\x00', 0x0) [ 1104.545003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.554976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.802143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="500000000802110000000008021100000000000000000000000000640001000006020202020202010882848b960c1218240000000000"], 0x36) 00:18:24 executing program 0: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:24 executing program 6: keyctl$clear(0x10, 0xfffffffffffffffb) keyctl$assume_authority(0x10, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='rxrpc_s\x00', 0x0) 00:18:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x5}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:24 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x9862, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB='grpjquota=./file1,max_batch_time=0x00000000000006e2,usrjquota=,test_dummy_encryption,barrier=0x0000000000010000,delalloc,smackfsfloor=,hash,rootcontext=system_u,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2d6d6173efc2abac12f007707851e340476b3d5ec79e3dc3526209000000b88d5294ac289871a6d687a9d966c0efcf9fcff0be2f74d1bc108c48975ee9122dfcffffffffffffff2fe2f77a9342d4cb92c894ca28238d8b0fea789e8c37e0cbc83274415d6b4fc81f6a46e12b"]) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x10, &(0x7f00000016c0)={0x0, {{0x2, 0x0, @local}}, {{0x2, 0x0, @dev}}}, 0x200017c8) dup3(r1, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7b, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000240)='ext3\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) splice(r3, &(0x7f0000000180)=0xffffffff80000001, r0, &(0x7f00000001c0)=0xdb3c, 0x0, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000880)=""/4096, 0x1000) 00:18:24 executing program 4: fsmount(0xffffffffffffffff, 0x1, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fcntl$notify(r1, 0x402, 0x2c) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x8, @any, 0x100, 0x2}, 0xe) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x840, 0x0) r2 = fsopen(&(0x7f0000000080)='tmpfs\x00', 0x0) fsmount(r2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 00:18:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) [ 1104.959968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.979516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.981068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 1104.992260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1104.996441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') write$cgroup_pid(r0, 0x0, 0x0) [ 1105.026572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 00:18:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) truncate(&(0x7f0000000080)='./file1\x00', 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:18:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[], 0x98a) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x3) [ 1105.078703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) 00:18:25 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) 00:18:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) [ 1105.299709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000300)=""/231) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x18, r3, 0xb0b, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x14, r3, 0x10c, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044090}, 0xc000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_a, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) r7 = signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) fallocate(r7, 0x70, 0xffffffffffffffff, 0xfffffffffffffffd) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 00:18:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x38, r2, 0x401, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x38}}, 0x0) 00:18:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x6}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) 00:18:25 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4b, 0x0, &(0x7f0000000340)) 00:18:25 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) [ 1105.464005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.474144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000001"]) [ 1105.493076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.495018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.510097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.778472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="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", 0x732}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_freezer_state(r1, &(0x7f0000000040), 0x2, 0x0) r2 = eventfd(0x9) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}}, 0x108) dup2(r3, r4) sendfile(r2, r3, &(0x7f0000000800)=0x200, 0x100000000) 00:18:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) 00:18:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) 00:18:25 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) 00:18:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x7}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:25 executing program 5: mknod$loop(&(0x7f0000000100)='./file0\x00', 0x6000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) 00:18:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4f2) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1105.928911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.933846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.954795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.964749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) [ 1105.975102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.986763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1105.988941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:25 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto(r0, &(0x7f0000000040)="e74ed1bf", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) [ 1106.040165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:18:26 executing program 6: syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) 00:18:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@acquire={0x128, 0x28, 0x1, 0x0, 0x0, {{@in=@private}, @in6=@private1, {@in6=@private2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}}, 0x128}}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x200200, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x24008044) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 00:18:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) [ 1106.154769] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1106.181600] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.5'. 00:18:26 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:18:26 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000001a80)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff}}) [ 1106.274953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80}, [@nested={0x5, 0x0, 0x0, 0x1, [@generic="e0"]}]}, 0x1c}}, 0x0) 00:18:26 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x2c, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:18:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:18:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1106.444007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.450998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 00:18:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x9}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="6d6d096d6930d4e58d139fe3f3c380eb759256d2b0dc0b25878c49f0730a8fa79359bf94068fd57d5bc09df5d6ed338f41a7a953c35472527a8b1c190bfa7d164729d5708898719edfbc63fdd48418ff0c4ca497bd35b593eca9446a6175a87fdd259f33a418273eece059d8f989000000000000000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000017c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @initial, @broadcast, @device_b, {0xa, 0x20}}, {0xa, 0x1, 0x2, 0x0, 0xa0}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x37}, @device_a, @from_mac, @from_mac, {0x2}}, {0x6, 0x0, 0x1, 0x1, 0x80}}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x841) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000640)={0xa, 0xfc, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1={0xff, 0x2}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000000800000b99bda00c712141394189ab876c5ec51847ae8ca3bdca220584ea8b7fba798b7c6afaecf4d2da11bb43b33e3c2732bb69278b5551fac836a47b7d124b514e2c40a107dc50243660d98", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioprio_get$pid(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) 00:18:26 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) [ 1106.469568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.472936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.488996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 00:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, &(0x7f0000000100)) 00:18:26 executing program 5: syz_open_dev$usbmon(&(0x7f0000000400), 0x0, 0x0) 00:18:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000640)={0xa, 0xfc, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1={0xff, 0x2}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000000800000b99bda00c712141394189ab876c5ec51847ae8ca3bdca220584ea8b7fba798b7c6afaecf4d2da11bb43b33e3c2732bb69278b5551fac836a47b7d124b514e2c40a107dc50243660d98", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioprio_get$pid(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) 00:18:26 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x28}}, 0x0) 00:18:26 executing program 6: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x342, 0x27ac5a4b14ab6e03) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIBMAP(r0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfdef) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="bb5921c281e79f86094710fb786f0a3f5eb79c94ce98327e6d28fc659e080c70ea22a7f4633f9210d7e4dc715e75ff66461f10af08416c61d77d5ba946aaaf889dbec1e27d38d8f0d000773cc3ae903b8ea02bb2473990207c674a13d4209d02846d3eff0e543ffb7ec29b832019aaf6be74", 0x72, 0x80}, {&(0x7f00000002c0)}], 0x1242040, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}], [{@uid_gt={'uid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'y\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '$}\x87%\\'}}, {@smackfsroot={'smackfsroot', 0x3d, ']@\x1a!(]\\*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) 00:18:26 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 00:18:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0xf}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:26 executing program 5: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index}, 0x3d2c) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2a7b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) close(r0) 00:18:26 executing program 2: pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0x1c) tee(r1, r0, 0x12, 0x0) [ 1106.730283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xbf8a, 0x0, "6b0681b08b531118eb90c8f028268aac5fea7d"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x81) [ 1106.779921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.787309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:26 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000640)={0xa, 0xfc, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1={0xff, 0x2}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000000800000b99bda00c712141394189ab876c5ec51847ae8ca3bdca220584ea8b7fba798b7c6afaecf4d2da11bb43b33e3c2732bb69278b5551fac836a47b7d124b514e2c40a107dc50243660d98", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioprio_get$pid(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) [ 1106.839670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1106.905912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) [ 1106.934619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.239113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:27 executing program 6: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x342, 0x27ac5a4b14ab6e03) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIBMAP(r0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfdef) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="bb5921c281e79f86094710fb786f0a3f5eb79c94ce98327e6d28fc659e080c70ea22a7f4633f9210d7e4dc715e75ff66461f10af08416c61d77d5ba946aaaf889dbec1e27d38d8f0d000773cc3ae903b8ea02bb2473990207c674a13d4209d02846d3eff0e543ffb7ec29b832019aaf6be74", 0x72, 0x80}, {&(0x7f00000002c0)}], 0x1242040, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}], [{@uid_gt={'uid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'y\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '$}\x87%\\'}}, {@smackfsroot={'smackfsroot', 0x3d, ']@\x1a!(]\\*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) 00:18:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @random=0x6, 0x4a10, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x70, 0x3}}, @void, @void, @void, @void}, 0x3c) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x21}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xcf8}, @acl_policy, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x48041) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_SECCTX={0x13, 0x7, '/usr/sbin/ntpd\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0xea3866712f4ade5e}, 0x4001) 00:18:27 executing program 2: ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000400)=0x5) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x44) mount$bind(&(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x40000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {0x0}], 0x3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) 00:18:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000640)={0xa, 0xfc, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xfc, 0x0, @mcast1={0xff, 0x2}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000000800000b99bda00c712141394189ab876c5ec51847ae8ca3bdca220584ea8b7fba798b7c6afaecf4d2da11bb43b33e3c2732bb69278b5551fac836a47b7d124b514e2c40a107dc50243660d98", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioprio_get$pid(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x500000001) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000003d40)=0xfffe, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) listen(r3, 0x0) 00:18:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x11}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) 00:18:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) 00:18:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) [ 1107.678438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.684681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.685903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.692289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) [ 1107.711822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) [ 1107.744762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) 00:18:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x23456}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup2(r4, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)=""/49, 0x31}], 0x1, &(0x7f00000004c0)=""/177, 0xb1}, 0x0, 0x0, 0x1, {0x1}}, 0x5) creat(&(0x7f00000002c0)='./file0\x00', 0x42224cd785f4b954) io_uring_setup(0xa1e, &(0x7f0000000380)={0x0, 0xfdba, 0xecfb35b0ed2e9e95, 0x1, 0x242, 0x0, r0}) 00:18:27 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 00:18:27 executing program 6: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x342, 0x27ac5a4b14ab6e03) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIBMAP(r0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfdef) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="bb5921c281e79f86094710fb786f0a3f5eb79c94ce98327e6d28fc659e080c70ea22a7f4633f9210d7e4dc715e75ff66461f10af08416c61d77d5ba946aaaf889dbec1e27d38d8f0d000773cc3ae903b8ea02bb2473990207c674a13d4209d02846d3eff0e543ffb7ec29b832019aaf6be74", 0x72, 0x80}, {&(0x7f00000002c0)}], 0x1242040, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}], [{@uid_gt={'uid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'y\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '$}\x87%\\'}}, {@smackfsroot={'smackfsroot', 0x3d, ']@\x1a!(]\\*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) [ 1107.796787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0x0, 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee846"]) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}}, 0x2269) dup3(r1, r0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xd8) 00:18:27 executing program 6: move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86) r0 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x342, 0x27ac5a4b14ab6e03) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) ioctl$FIBMAP(r0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x1) creat(&(0x7f0000000240)='./file0\x00', 0x189) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfdef) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000003c0)=0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="bb5921c281e79f86094710fb786f0a3f5eb79c94ce98327e6d28fc659e080c70ea22a7f4633f9210d7e4dc715e75ff66461f10af08416c61d77d5ba946aaaf889dbec1e27d38d8f0d000773cc3ae903b8ea02bb2473990207c674a13d4209d02846d3eff0e543ffb7ec29b832019aaf6be74", 0x72, 0x80}, {&(0x7f00000002c0)}], 0x1242040, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}], [{@uid_gt={'uid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'y\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, '$}\x87%\\'}}, {@smackfsroot={'smackfsroot', 0x3d, ']@\x1a!(]\\*'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)) 00:18:27 executing program 5: prctl$PR_GET_IO_FLUSHER(0x3a) [ 1107.989515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x12}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x44000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x124c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffff9, 0x6a}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11dc, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5b, 0x1, "201108e0b2cc6a5f29a48bc071d07d0242b7b00577bb49d4a0f18a70fea877038996f107073a8ed5603ec376275a5cdab6ed25a40df85925df6326405649bc3786d676829a605fe616daf520a789c59b76ea2bd0a3b1a3"}, @NL80211_BAND_5GHZ={0xef, 0x1, "0cc99a6409e14f8d0361ed677e57b1269f41edc5ac89c00c643bce2b4aad80f0114c2013bf93542556a0c78380065c97672e30e83469bd8050044b066790d1483da7838a25431c838948c6aa423204ae41eee4fe0496351cc346428de1f529dbcce0d169f9bad7ecc34b46b9da00eea81614e40a874dbbcdb867cbcfd3f051cfcd7f3a121c04642ccba6e052265c2e441a280e8e02abe59c8c43b6da41e69f6628bf4468404d1eb67ffdc8a45bebb54ca20a2a86462781e0ebc092d4fb571c2ba8be3f3dba601a9d9949e4134ea14622b5b8bf7d11d902f4bb138d3c467c1f4a279e9504165c90a3b7a5ed"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "1af66b5284d7461df7a9e77c64e9fd16c989723d2e63510ac0ab81b2be252c534f59e3f5739e006edcc294be0abed91f6def3a7a051c0faa41efc598708ed75207b88364a0e18aaef5954e71547a1f343dbace554d222dd9080ebf517d796560e95f21a69a9536706d5506b59f244cdc1ea0313847fbd659294f9763d750dfa32e2a2e32d6da7970d20f0e5cd09429dec7c4010de50bd47d02506220e8881c8ed030a82c2683ddea8fccaa54fdb22935e485cf460dcc626e7418fb6d25e0e381b6c2fe28e1524301851516171f265252f4cbf079cacc3e5119babb8e244684a93b6dd134536ca90d62eae64ae20716859fb0b7025d5a874cc03381cbae22e06a6776224fb8a89370655ab8cba48670d9243b08733236a3b07d214e733cd5b97b190c402243a61f9bde609c0c23bccea357d9efd5fc7ad88e433d015834311936f924dd601e121568cf2153ebd8c6d7948a8e8efae73b41ea950b6f4491fc04e5cfb4a4f926f0d4d157ff34143569852efb4e6903f62799975ed4d45d67c5c48ecae44cbaf953601128549a45e4c7612bc442e9c186fb311937569015b867fb580faff86aca665cd8c908b7f2f230c6c4125b56eb48aa0c25b13a0edd59abf41719e38a657c2a90a9b101faf19601acc3531fbcb900cd168f483ef01606c83d6737ff523e349784a61de88eacdff31403e34e89d5997f374feeb410427827213f932db362e8f9e6cb039b75676a154b9faed0b7706d6e2790390ab5a481f1297a04aa8130f412216343511ca68f687e77ba56c7a13de140697ff2af3d5245728663d5ebc9d7f035ec1c7f837d777f59b7cbfe3a39f0c2c9bb56ce0b97021b93f28af5e012d12d5838947d88d42d8f12cd6f41f2d35d77fa957cd9b1f23962bdd587df43dca1f795755af293de1c40e4317d045e51d708fda201edec0ad3bc1a69e347a78aa210aa26af86c7e58fd89b3912dd05468df73f64e6885a356b5791af233302f0817f1b7a7bb7efae02a68812b74b1cd1605283baf84865d24176a5dbee815292937a3de89f579bc0aa2fa7042b380c3849081587f77f087734fc82e5348c7ab059766ac71b98090ef5a15c06c46274c12f4a685be4ff089b484e970162adf898c3b070aca54f22d5cbd4431d45f4234bfd33643a1effdf40ec1411bae58c8b1b0de7eea253653c924468ca12371bd848235f3df6209d4a32a058e9c12eed4df3e284322f150e9ab01e72f5b72d9368134974ded559e2f0c5aae70b2cdab06436797d12d9f619e5d5af070514ae77b440567a86d8b25b4bc8103576dd565a657d63ec70cdc454d9c5d1ab50a4f772418ec5e4fa40321eca59e193be6aedb7d72b3662c997641a9d909ff1858cfd8c37f9181a17794f4f155773c63452f704061524c064ac0e938e499aa2a2691dd743d88ec594753e2f6c5327a688b6b324a3d69ea5e1df90af72faa8fbc094418b78c25a669c1c012a7662b9e9b876e94fc7f1ebbff3195cdef09f9cf412ea211e66f966d940b9eb9665289d083c7a1c983258e381da8123adabbf340118f5086e61249a4537dc5764a8b4ba66a75e40ea7dc0420a2a41919505b547ecf89891e55eba6109146b39cbb31ca147edf962afc45d256bd821277688802d285ec582a152a217bae791cca657371a218e69ea9a408b318c67a25736d9c3476aed42dc9094563f2da8c79bcfecdbe1659ddb9ad88512bc1d1c8fbdbbf2f8e9f4612dace08a34a231f84670160dd6f25dc60d6b4169d9f0ad90716ce22e329758f8b2575555de1e22636599fb9d6106b40c86b0c561e5e939eb43fb0615fb2cc3e09b94b96a31cedd0ac768eae4de523aaae4c8437cfa4275e017d4f1d9780841fc70c1052028446e79ec62c2b0311541d0006c73b1fa73a4c2df1086561058440c67b329d07c60f909d1012b24e0bbb6e64c81821fbb9b050c527560729d55176d6cc0b5abad0baa650e409a314d04deed5a468a7e216bd2b6babb5ca17ef0e56532ee86fac1908aa6f62106b775943fe244520ebc5f89065c3af709389ca0e434c584c2e264ea6e83873fa2697a1c312b1b30298376da725cbdd6367f0a4ed61ccb6f02ebce879af37671ae819ddff4203bde101604b1b40aee6055ebbcdef87275851f81bf53768543cdb7aa3e670e354e0cbcd2b9cb8fef27b973c16f0d565903f8f25327cae4791e62c660f78feb2ecd526be4a09398756ee2057a84cfd8c6a870ff3c94155aee3067e9484c3f3d94f374c81b45e9a81b887ff00c4ad3b8abeed8af4b3fbf0819010f7cda7eb7e0fbc08c56ff6e2242d899817426ccdb7b4a27d8fa457a2137210e7debc32c870e8d57bb88a6966cfec4c2ec3039cd4216c90e79ac83e5fbab8ba25120843e862c6082cb21dfde436a0bc9a4ccc5eb76ac34eab3b33357a5c0e3b49f9fbdf202474374af0282246f15b0141d4558b16614cabd018ee4e580efdd9689895221513bd07f7a335f11395fbc1bedfa2eaec53ebaa3dd30b22dbe9846d694b78c05de6c615c0fc5abb24cbb19dd7aa77af2a9555012dfa11212e673568bf6a64fa2d4ab32f3db7d040f45e67337d955be49ebf019daaedda087d18cdee584efdb6ce196e632e9dad82d42a5cc5a12951ce0a437efeb48c9a639674c0eb5841d5212ffe03e5bb33a953579ab4b150724770742977c9079f687ce4c2d094083655279068660126b54f487f0014ef6005664cc6d837e4f5ddcb0ea05e6eb26859d624f0f121735822aa7f78abd8a9c29a731dd83939413ab9c9d40d74c3c0df5c8ac81a15df9b66dd26ece5cb2135814123d130970b403295baf8dcfd423f0af4e925c8f546f104780af4fb737a998f22b074306b66ebe0675f4f09bdf56dd21a46fc2eda7820cb299903b331bd33de0cd532cea1231e61ef22a9621cf425980e4229724d470803b6317ec8443312cc176b09d79f176a1f6c74b8caa395de4e55af29d3d0c2cf7eac4e1523cdc7b3e3a6facba64530c6b526b992ca4c8e99a12bdd484eeda85fca81b8371c85773c728458c5f6958e3364e07615f19f3c9aedb671b07f27065cffc5e971b66c29bec45feea2251cd2ed012a7e909e1df31b5df48a3a3090177f21778229a93206e6a1691e73607ba01efe4ce6a67ffa4bf99180426e8be7f532069ab0bc082afe5be811c9588fdeb84d1b0b24d90057ec09144d83ec42297c7708cd0f11c8c93971021e91cd5735963e8bdcb65abfb43d9fab977698d70663839e0e653375ba7a8faaae78fe66f229235c0e5f035fc17cf73dd9ec056742d87e1e8a11799abd1e4609ed89589abee92720e204898dc62dabab5149702d94971f1d456d885ec66544adf1409b7dbf8b009279df19feb82b310f5c7758a26c6af1c31fe1ee6e7bda564418db07dd93fed649dba2e6ae51fe26a6d78e8600b9b4cbfb35316a6468c2aa30399b107f80b4a13ac9ce669a745a720db216acbb9370018abebd52bafae3a444bfc2948daf9edc0bcbeb289e6a1d5f38868a4e7164516b4297a03e3124bb9c7be900b68803a0fcd17f17957ed8cf06924d4959c0e5dfeef26a43a3d915474c0e8a9a4ac48a0e6244d3cbaf70277b91cad83382be78a8ee51364c2ef6986df02a2eb54ed21047ae4d67e262b8498b49ec35768304369d8ff072fb44de70f6fe4851ab2c9c62931b13d982ee66ecfc294af313525de1bffd9f2be7000cf85fbcde5bd579eb947087766c9467364424475ee4ed6f75f5d0462a3b7d925bbbfbf93dd49f45f9d58accd0e5b9440b62a1725486424d55249bf28c7b5a7b2ae164ba3e01e166151823c4287ffdfc1e0a47110fef537ef13240235d78eef22462284e29088dbcf1ec5a25383441779f399484c021f80172360f595db3f307ae15a69fe3814c80d3ffa7c64bb8bd91cd6dcf9952fd997fdd9e6090b2caf0ce01a897835670ef6e7693d2e109710ae1c1cc30a54098b4caeaec093fe9d6fd64e1771e2d0ae95ba40e6e97973b47dccc2942820f807c9d4126d7425e48fe13ea8db6a5636ba58df651bc73b88b254bfbacca8a0b4bcc3dfd4608d99bd812fb4bb7a06dfe47dcb06a87e4104bca5586a6b43a980b5444f4bc705f281e85dba01a21b0d3dee5c7d354619f292c54894edd53c8a329d319d9f698d253a956f25f53f119b8bb5feddeed0c3e4bcce49104d831488d101b87820efabc27311995f85cb2734ee502407ad12e7c32e2ad2c92edaa4f93279aa05130295cde1d351a22bff3799fd8adab29d595610c5935009aa159ac3c4d7762175d3a98bba30b7d23220a9017ffc2ee0e08f0923fab6a81219b425c1a95457d2d9b01e6a55d9fc6d3b5eca5608565032d427a89b804fbc4ff9bdefed646a38537cd086fc9da3edb761de0d4defde881232554d7c423dd509392b34cbd37a0a50f4eec21ab7612dec92510f4169895d6170287447b2e7f93c26b73234238d68b6f7ee330c2717216748d3f123ac23a0993d6ccc7fd6576684e5853acfab0146c5ad78aff1f19af4fde2d5e5ac6eb8b7e3676592bed6772d9d0c640ed42f3ae73303ccecc3beae8db9101d090f55b7be0f16d937b33ad9dae0d3e90e6ca9dd9ffbfe0d70ec26d1e2acefe99a648d10c29e65b05b429bf02fe6e2e22a4ebe46eefe87efa316398d49f7bc582ce567a4f58c83c756e6ce4130979412c41a117df266cff4b40c59d14497345fd7a9a33adc33a1f775c1bed91e14e62ff812a20a75d04af7889d315c8fedcada1758eb9d7f0161bcca0261592fc7d437bb06e21eb820100b3b57886eece1e953b4ac013b8801375e2bf02b4f71dc08ae1419957214aa0f1ee807454f56d08a3e291504d22322f7ddd7ad80db95ed29dcfb121bb3ed74acaae0f1636538a42cc0ef9006665a262ac940ea7aa3efb3b7ae7d86612b7c97b8c8f32c7b58a6e259866aeeb8ac05eddc810df07f6306f72554c68ac59a070ad71bcbb99b9894db82eef74c5b065bd44118ff03b16e65d0822b73cc01bfae6208f2d696d70a152526f37db504bd24ddcf4bd45fe4829e977bd1e0fde71f1d157b2e8ac9f768a1b562bc46b36a3585a078b7b7e2362c9b7272d95909234e3fef3637c45795107b49131ec8f69c7cbd1329a1074e3181663902649ddc2f61bff4d50a488533192c61e77d393b0311ff99b0192f350d308105960f145e01580d61b255c981ca27bcad3ad3041d70e6a5e9d2b7b96857029e4f8e7a2b8d7f3d25a0f37dda75516d93f6cc3729ebf0a4c51fc9f927232e386e71d0618bc30a11b64f14ede3f74ca7908105c6efe70fbf8cecc02c10a5147595cd9a8bba8e7c2163fcdc0f8e3508a1cb4eca167872ae65344576a39aa110011c7960bcbea34da1cc094cf10af09ea66b47a567d8e284b9a315c79bb1ad0d05a8218935c8acefecf127a9bb0e920d713cafb485e136b4a62e33efb2e2c4a3d148749f7128f0900a3084ade9a3deb419d88a5b0c3de61ae6eca5a0917a6047c4f65d2b3e6d873c8b7b4502cdb740db7b7922912e49058124ed42bc2bf017c663b0c074ab974ab9f677ce8d6425880752c8b6646db8b898dd8caf582817875ae83ba3dc32e5a727e6b7f0e05b55ebc4e6f0682aa6d2162bff3e875cbd803bcf8035672e883d0c09a8c4d52a0551af911b1a58c4850e8cfe9313edae40de0f47be83982f1ae0855a24699c0aa93455f46a46200bc3a1bf609f435adab3bc0e109d8ff52ac62893259bdae0ef5794fe0749a6493a504dc409a7c7f6d28ddc84948d5a23f623ee390d00515bdebbc82c06b4"}, @NL80211_BAND_2GHZ={0x85, 0x0, "59f5dacda9b7ab8ef6146861037a0fa6d1bcb0064eba6b7d5d37accb6296bd83f7ebde729cacec554c1ae95ab6cfd93fa5c848f5987627516a5de91d51a8f3724460684a91d72c9cc37a12f4f3722c31249e3a687146f4e77f6718127dba5f027f3e96f08545475cb4a2c43b8fbd76dc06d8cdc2e71d7fac98d5324fc1a4288124"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}]}, 0x124c}, 0x1, 0x0, 0x0, 0x44000000}, 0xab7e519ae342f567) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:28 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000b800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003380)=[{0x18, 0x1, 0x1, "bc"}], 0x18}}], 0x2, 0x0) 00:18:28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) lseek(r0, 0xfffffffffffff014, 0x1) getdents64(r0, 0x0, 0x0) 00:18:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x61d4ecb5, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000580)="694f96e0c33d1e21eb46dc6e364e7167f6a99b9224cb04031a03c14b43d1b24b307a4cb5c3ac684dbba9705ad1054df04ee25677cc1822b6d619dfd2f64f94ba778c4c3731dbdafbb97b9d8e9b5b779113f3fafccc50d2082c56b2d6879c23641bb8a7b6696f287f332cdd03222095bf4f6e8e7cbb1a2bd68ea7f491e67ccbcf42a1cd88", 0x84}, {&(0x7f0000000700)}], 0x3}, 0x10044001) 00:18:28 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c00, 0x1a0) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) 00:18:28 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0xff3c}}]}, 0x148}}, 0x0) [ 1108.205276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.212988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.221884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.243274] ------------[ cut here ]------------ [ 1108.244051] wlan1: Failed check-sdata-in-driver check, flags: 0x5 [ 1108.244682] WARNING: CPU: 1 PID: 430009 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 1108.245468] Modules linked in: [ 1108.245755] CPU: 1 PID: 430009 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1108.246459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1108.247193] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 1108.247646] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 44 c3 8d fd e8 3f c3 8d fd 8b 54 24 04 48 89 ee 48 c7 c7 40 86 95 84 e8 87 f9 24 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 1d ab b9 fd e9 97 fb ff ff 4c 89 [ 1108.249227] RSP: 0018:ffff88806c7e73f0 EFLAGS: 00010282 [ 1108.249692] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1108.250320] RDX: 0000000000040000 RSI: ffffffff8129dec3 RDI: ffffed100d8fce70 [ 1108.250923] RBP: ffff888035174000 R08: 0000000000000001 R09: ffff88806cf27fbb [ 1108.251544] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888035174bc0 [ 1108.252166] R13: 0000000000400000 R14: ffff888035175da0 R15: ffff888035175d98 [ 1108.252772] FS: 00007f1d0aa75700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1108.253482] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.253969] CR2: 0000001b2f222000 CR3: 000000006741a000 CR4: 0000000000350ee0 [ 1108.254600] Call Trace: [ 1108.254833] ? __warn+0xe2/0x1f0 [ 1108.255140] ? irq_work_queue+0x44/0x50 [ 1108.255484] ? drv_bss_info_changed+0x554/0x5f0 [ 1108.255879] ? report_bug+0x1c1/0x210 [ 1108.256231] ? handle_bug+0x41/0x90 [ 1108.256554] ? exc_invalid_op+0x14/0x50 [ 1108.259022] ? asm_exc_invalid_op+0x12/0x20 [ 1108.259381] ? vprintk_func+0x93/0x140 [ 1108.259681] ? drv_bss_info_changed+0x554/0x5f0 [ 1108.260070] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 1108.260480] ieee80211_ocb_leave+0x1ed/0x340 [ 1108.260817] ? nl80211_parse_mon_options+0x45c/0x690 [ 1108.261234] __cfg80211_leave_ocb+0x1d6/0x570 [ 1108.261597] cfg80211_leave_ocb+0x4e/0x70 [ 1108.261920] cfg80211_change_iface+0x843/0xf90 [ 1108.262299] nl80211_set_interface+0x67c/0x8f0 [ 1108.262655] ? nl80211_notify_iface+0x180/0x180 [ 1108.263020] ? nl80211_pre_doit+0xa2/0x630 [ 1108.263370] genl_family_rcv_msg_doit+0x22d/0x330 [ 1108.263740] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1108.264257] ? cap_capable+0x1cd/0x230 [ 1108.264568] ? ns_capable+0xe2/0x110 [ 1108.264857] genl_rcv_msg+0x33c/0x5a0 [ 1108.265170] ? genl_get_cmd+0x480/0x480 [ 1108.265482] ? nl80211_notify_iface+0x180/0x180 [ 1108.265647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.265843] ? lock_release+0x680/0x680 [ 1108.267178] ? __lockdep_reset_lock+0x180/0x180 [ 1108.267541] netlink_rcv_skb+0x14b/0x430 [ 1108.267850] ? genl_get_cmd+0x480/0x480 [ 1108.268180] ? netlink_ack+0xab0/0xab0 [ 1108.268489] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1108.268837] ? is_vmalloc_addr+0x7b/0xb0 [ 1108.269171] genl_rcv+0x24/0x40 [ 1108.269432] netlink_unicast+0x549/0x7f0 [ 1108.269747] ? netlink_attachskb+0x870/0x870 [ 1108.270113] netlink_sendmsg+0x90f/0xdf0 [ 1108.270432] ? netlink_unicast+0x7f0/0x7f0 [ 1108.270766] ? netlink_unicast+0x7f0/0x7f0 [ 1108.271113] __sock_sendmsg+0x154/0x190 [ 1108.271420] ____sys_sendmsg+0x70d/0x870 [ 1108.271734] ? sock_write_iter+0x3d0/0x3d0 [ 1108.272072] ? do_recvmmsg+0x6d0/0x6d0 [ 1108.272370] ? perf_trace_lock+0xac/0x490 [ 1108.272692] ? __lockdep_reset_lock+0x180/0x180 [ 1108.273062] ? perf_trace_lock+0xac/0x490 [ 1108.273389] ___sys_sendmsg+0xf3/0x170 [ 1108.273708] ? sendmsg_copy_msghdr+0x160/0x160 [ 1108.274114] ? lock_downgrade+0x6d0/0x6d0 [ 1108.274469] ? finish_task_switch+0x126/0x5d0 [ 1108.274841] ? lock_downgrade+0x6d0/0x6d0 [ 1108.275213] ? __fget_files+0x296/0x4c0 [ 1108.275557] ? __fget_light+0xea/0x290 [ 1108.275889] __sys_sendmsg+0xe5/0x1b0 [ 1108.276226] ? __sys_sendmsg_sock+0x40/0x40 [ 1108.276591] ? io_schedule_timeout+0x140/0x140 [ 1108.276981] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1108.277449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1108.277881] ? trace_hardirqs_on+0x5b/0x180 [ 1108.278263] do_syscall_64+0x33/0x40 [ 1108.278578] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1108.279002] RIP: 0033:0x7f1d0d4ffb19 [ 1108.279336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1108.280867] RSP: 002b:00007f1d0aa75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.281524] RAX: ffffffffffffffda RBX: 00007f1d0d612f60 RCX: 00007f1d0d4ffb19 [ 1108.282153] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1108.282751] RBP: 00007f1d0d559f6d R08: 0000000000000000 R09: 0000000000000000 [ 1108.283365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.283981] R13: 00007ffc91f780af R14: 00007f1d0aa75300 R15: 0000000000022000 [ 1108.284600] irq event stamp: 2069 [ 1108.284911] hardirqs last enabled at (2077): [] console_unlock+0x92d/0xb40 [ 1108.285662] hardirqs last disabled at (2086): [] console_unlock+0x839/0xb40 [ 1108.286382] softirqs last enabled at (2030): [] asm_call_irq_on_stack+0x12/0x20 [ 1108.287140] softirqs last disabled at (2025): [] asm_call_irq_on_stack+0x12/0x20 [ 1108.287915] ---[ end trace df51cd7833df9b89 ]--- 00:18:28 executing program 2: r0 = syz_io_uring_setup(0x30f5, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x6762, 0x0, 0x0, 0x0, 0x0) 00:18:28 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x0) [ 1108.319212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=""/68, &(0x7f0000000040)=0x44) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 00:18:28 executing program 2: write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x105c) r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) 00:18:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/tcp\x00') readv(r3, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/230) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="073b9d04", @ANYRES16=r6, @ANYBLOB="010000000000000000005c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) fcntl$notify(r0, 0x402, 0x80000022) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd0, r4, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x5b}}}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="9cead5ed5afc9ad897bab2957f86e8cf9d72eb76d616fcc5316ef4cd80a7a00e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cabe709b082073c1ed8bbd2c9ba6ec54c57cc22c31ce703b922df90ed9a64d0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2f1e683f36def023301c2d36a92b7915cca073b49f3f33b0bd1e1ed566495679"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1fa06d3763b66e9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d486a6d057c652bd"}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {0xff}, @device_a, @device_a, @from_mac=@broadcast, {0x9, 0x5}}, @ver_80211n={0x0, 0x7ff8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x3, @void}, 0x1e) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:28 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0x0, 0x0) [ 1108.485900] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1108.493956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.505020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.529193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:28 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c00, 0x1a0) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) 00:18:28 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000002900000000000029252f", 0x5a, 0x8800}], 0x0, &(0x7f0000000100)={[{@nojoliet}]}) 00:18:28 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {0x1, 0x9}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}]}, 0x3c}}, 0x0) 00:18:28 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0x0) 00:18:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:28 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 00:18:28 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000100)={0x2, 0x0, 0xa, 0x1c, 0x161, &(0x7f0000000740)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x14}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1108.923877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1108.926495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.930517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.940488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:28 executing program 5: syz_emit_ethernet(0x52, &(0x7f0000000a80)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0900ad", 0x1c, 0x2b, 0x0, @remote, @local, {[@srh], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:18:28 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) [ 1108.980525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 00:18:28 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c00, 0x1a0) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) [ 1108.989758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.002573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.036662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 6: select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x100000000}, 0x0) 00:18:29 executing program 0: r0 = openat(0xffffffffffffffff, 0x0, 0x2d3242, 0x84) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRES16], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x4, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_fscache}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@access_uid}, {@msize={'msize', 0x3d, 0x101}}, {@access_user}, {@debug={'debug', 0x3d, 0xfffffffffffff597}}, {@access_any}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c00, 0x1a0) mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r2, 0x6) openat(r2, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) 00:18:29 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) [ 1109.247376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4) 00:18:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 00:18:29 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x80) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) syz_io_uring_setup(0x4751, &(0x7f00000017c0)={0x0, 0x45b1, 0x0, 0x0, 0x290, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000001840), &(0x7f0000001880)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r4, 0x10000000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)=0x4, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 00:18:29 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) 00:18:29 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 00:18:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x14, 0x12, 0x101, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 00:18:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 00:18:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x36) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000780), 0x280, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 1109.447475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.489095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.496987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) [ 1109.516915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000880200205f490137f7aa1e"]) [ 1109.541780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.559987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) [ 1109.614476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 00:18:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) [ 1113.380129] Bluetooth: hci4: command 0x0406 tx timeout [ 1114.404121] Bluetooth: hci6: command 0x0409 tx timeout [ 1116.452402] Bluetooth: hci6: command 0x041b tx timeout VM DIAGNOSIS: 16:38:30 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff888008800dc0 RCX=ffff88806b9ffb04 RDX=ffff88806b9ffb10 RSI=0000000000000000 RDI=ffff888040a68000 RBP=ffff888040a69100 RSP=ffff88806b9ffaa0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff88806b9ffb08 R13=ffff888040a68000 R14=ffff888008800dc0 R15=ffff888040a68000 RIP=ffffffff816f3cf2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555571e3400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe7200000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555571ecc58 CR3=00000000486d2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822d053c RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff88806c7e6d40 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d69d R14=fffffbfff0f3d652 R15=dffffc0000000000 RIP=ffffffff822d0590 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1d0aa75700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2f222000 CR3=000000006741a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffff00000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000