V_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[]) clock_gettime(0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000100)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000740), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000980)={&(0x7f00000008c0), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20010081}, 0x20000804) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000ac0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000002c0), 0x0) recvfrom(r1, &(0x7f0000000200)=""/140, 0x8c, 0x101, &(0x7f00000000c0)=@can, 0x80) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) [ 1827.743088] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1827.749037] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 1827.760452] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1827.762921] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1827.765885] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1827.778047] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 3: mount$9p_unix(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x20004, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d756e69782c63616368653d6c6f6df3e83a6b064e2a8ce6477e55626f7365733d636c69656e5e2c64666c747569643d", @ANYRESHEX, @ANYBLOB=',obj_type=&&,uid<', @ANYRESDEC, @ANYBLOB=',seclabel,\x00']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x0, 0x0, "4fa2f8201eed6e500c32342a227989f18a88ab65bad4c23a441d66f462f1df77bc777d160562da8c50431b2a204f36c6ed27b00215909d75417aa68c9029c5fd", "176764fe8c2ff71a1633d53dafbecd823af97cf5831be9a6fed5449e9f77dd92"}) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) lseek(r1, 0x9e46, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in=@remote, @in6=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000900)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000000a40)=0xe8) r2 = getpgrp(0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00') perf_event_open(&(0x7f0000000540)={0x4, 0x80, 0x5, 0xb, 0x0, 0x1, 0x0, 0x81, 0x20001, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xff, 0x3, @perf_bp={&(0x7f0000000500), 0x2}, 0x40c, 0x3f, 0x2, 0x8, 0x3ff, 0xfffffff8, 0xf1, 0x0, 0xccd, 0x0, 0x81}, r2, 0x10, r1, 0xd594b8bd6b845248) faccessat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x102, 0x200) unlinkat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 16:37:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 1: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) sendmmsg$unix(r1, &(0x7f0000008a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4010) r4 = signalfd(r3, &(0x7f0000000000)={[0x6]}, 0x8) connect$unix(r4, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) 16:37:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x40000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1841.377244] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1841.383924] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:37:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1841.401429] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.403880] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1841.409945] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 1841.417355] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.421266] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1841.426270] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1841.434323] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.438832] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1841.442115] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1841.444539] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.449073] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1841.451472] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1841.453299] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1841.486169] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1841.490205] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1841.501753] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.508030] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1841.516923] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1841.523899] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:30 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x4000) 16:37:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xb5100000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1841.617253] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1841.621536] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1841.623187] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1841.631082] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1841.636944] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1841.638064] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1841.655528] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:37:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004000800056290"], 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r6, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0e0aaad219"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "46fe35b0d9c2dc67958750b5ea"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f1f52034ba8a20b90b2f5d59f3"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48081}, 0x24000810) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x92}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000014) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, 0x1f}, &(0x7f000000d000/0x9000)=nil, &(0x7f0000014000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000040)) [ 1841.665647] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1841.666509] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fcntl$addseals(r2, 0x409, 0x6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3f}, 0x1c) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x3}, 0x6, 0x0, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1841.673844] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.684355] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1841.709146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.721848] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1841.744224] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1841.750300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1841.772546] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1841.775909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:37:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:37:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:37:45 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:37:45 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x61010000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:45 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000440), 0x1, 0x10000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000500)=0x8, 0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x7f, 0x7f, 0x6, 0x6, 0x0, 0x8, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0xf}, 0x4000, 0x8, 0x6, 0x0, 0x8, 0x5, 0x5, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x2, r1, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x10) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_none}], [{@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@seclabel}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x141043, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r1, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="400300001400010000000200040000000a00000008000000", @ANYBLOB="1d0001dba8723dd6c3e6f1fac25ffa8844cb9b55ea2ca1e53cfce8edf445fc03352361c6a301450b5b8226b708c3d93a54225309d6c20e0febb8c7cdbff256438c5de3094319db044e56f6130ab906d4ebfacb134d020a94e4813e6a73941394a0376ca5bde707e8a578ae5f00d30a2d27d6732541c70c1d303cd7e349eda9998352f17a3aa8ac2d"], 0x340}}, 0x0) accept4$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x800) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)={0x80, 0x4f9}) 16:37:45 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xb6100000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1856.858441] validate_nla: 4 callbacks suppressed [ 1856.858458] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1856.870317] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1856.873178] net_ratelimit: 4 callbacks suppressed [ 1856.873191] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1856.879030] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1856.881965] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1856.883793] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1856.887400] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1856.908498] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1856.914948] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1856.919505] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1856.923077] 9pnet: Insufficient options for proto=fd [ 1856.923239] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1856.934356] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1856.937913] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1856.940612] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1856.942169] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:37:45 executing program 2: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/4096) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f0000000400), 0x0, 0xffa, 0x0) [ 1856.980065] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:37:45 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1856.991337] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1856.996263] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1857.021298] 9pnet: Insufficient options for proto=fd 16:37:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:46 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:37:46 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1857.099192] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:37:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xb7100000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1857.116266] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1857.128415] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1857.132270] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1857.136196] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1857.138090] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1857.142897] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:37:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1857.165303] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1857.175251] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1857.178910] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1857.183495] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1857.185157] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1857.195940] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1857.218242] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:38:01 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:38:01 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:38:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:01 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3020000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:01 executing program 3: memfd_create(&(0x7f0000000340)='\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0xa0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x9db00000) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x2000) io_uring_enter(r3, 0x5c33, 0x8, 0x0, 0x0, 0x0) 16:38:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x288900, 0x102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={&(0x7f0000000140), 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfca71d510247ac9}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x1a}) acct(&(0x7f0000000040)='./file0\x00') fchmod(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1872.978410] validate_nla: 2 callbacks suppressed [ 1872.978418] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1872.981862] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1872.983377] net_ratelimit: 2 callbacks suppressed [ 1872.983384] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1872.986387] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1872.988839] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1872.990209] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.015235] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1873.024899] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1873.036481] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:02 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.042180] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:38:02 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.060898] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1873.062777] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.074084] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:38:02 executing program 3: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3020000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.093691] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1873.093916] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:02 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.094199] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:38:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.095319] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1873.096852] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:02 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1873.108943] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 1873.109102] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 1873.109110] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.126503] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1873.136926] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1873.137143] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.148100] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 1873.153921] mac80211_hwsim hwsim48 wlan1: refused to change device tx_queue_len [ 1873.154131] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.200152] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1873.201488] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1873.201990] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1873.214996] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1873.226260] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1873.274021] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1873.352717] Process accounting resumed [ 1873.407134] Process accounting resumed 16:38:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x288900, 0x102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000007c0)={&(0x7f0000000140), 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfca71d510247ac9}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000080)={0x1a}) acct(&(0x7f0000000040)='./file0\x00') fchmod(0xffffffffffffffff, 0x0) unshare(0x48020200) 16:38:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='security.apparmor\x00') r1 = open(&(0x7f00000002c0)='./file0\x00', 0x448343, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) open(0x0, 0x800, 0x1) r2 = gettid() rt_sigqueueinfo(r2, 0x11, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000700)=0xc) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x87, &(0x7f0000000140)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x79, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x65, 0x0, @opaque="57501bfc009b1dff4df33f415f4e9065cc559cf4042e44d4bd841c32138eea16cb30d3302b4aa6a0f49cc4ba41fffa0367d207d100794113c85ee40ed8f97d33fe50ef398e107070a732d88b2eeb82fcce0ef72e93d9c388d2fab74529"}}}}}, 0x0) recvmmsg(r3, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x102, 0x0) 16:38:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:38:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xf, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1888.338978] validate_nla: 3 callbacks suppressed [ 1888.338990] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:38:17 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1888.362884] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1888.372928] net_ratelimit: 3 callbacks suppressed [ 1888.372941] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.378953] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1888.395098] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1888.397460] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.401915] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1888.410918] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1888.437147] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1888.456487] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1888.461774] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1888.485987] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:17 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:38:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:38:17 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffe000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:17 executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xa01d, 0x20, 0x1, 0x3df}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x2, 0x401, 0x7, r2}) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) [ 1888.616153] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1888.623942] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1888.641092] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.644375] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:38:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x25, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1888.654260] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1888.662349] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.701285] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1888.706167] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1888.712290] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.716160] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1888.742787] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1888.749033] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1888.760752] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1888.832147] Process accounting resumed 16:38:32 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:38:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00@'], 0x30}}, 0x0) 16:38:32 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140), 0x5010, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@fscache}]}}) 16:38:32 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1903.187031] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 1903.188786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1903.189884] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1903.198959] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1903.201359] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.205948] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1903.211173] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1903.216148] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1903.218518] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.222861] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1903.236330] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:38:32 executing program 3: r0 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000008c0)={0x0, "65a6cf5b9c07642a3340db90bee4874c94ec4fdd53be77d8d05520d91682233c045247ee072dddb4606017c18511ee7cc2005a83f5d5bbc07333a25fce3d1db4", 0xfffffffc}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='\x00', r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0x3}, 0x1c) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x4, r2, 0xfffffffffffffffd) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='\x00', r2) r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r3, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1903.259007] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.266112] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 1903.267655] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1903.291353] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1903.293823] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1903.296018] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:32 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mq_open(&(0x7f0000000380)='/dev/sr0\x00', 0x80, 0x38, &(0x7f00000003c0)={0x19, 0x7fff, 0x400, 0x7}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:38:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x37, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:32 executing program 2: r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/148, 0x94}, {0x0}, {&(0x7f0000000440)=""/181, 0xb5}], 0x3) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() getpgrp(r1) 16:38:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 1903.420150] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1903.439336] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1903.450193] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.459238] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1903.470510] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1903.483212] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.487926] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1903.500421] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:38:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x52, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1903.512460] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1903.554097] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1903.561500] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1903.563611] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)=ANY=[@ANYBLOB="18005c4f664747c8e622ba0ddf00006a40210cacea961f95"], 0x18}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x358, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x32c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x324, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa}]}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}]}]}, 0x358}}, 0x48000) r4 = epoll_create1(0x142c2069e147ab2a) r5 = dup2(r0, r4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x36b1692e088eb3d2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf4, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40}, 0x8014) fchdir(r4) 16:38:47 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) syz_io_uring_setup(0x4bf1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0xfffffcbf, 0x2f}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:38:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:38:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1918.141280] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1918.155783] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:38:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x53, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2dfe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000980)="b94717faf7a499a66fe8c2bf2090cf36982e7382e4f57fbf53ff74221b0ce545fb75fa5f17a72ab5fec34ba44e640f6081b11bc03ce9db8620f1c52bb7afb050d58ca60dba52607140384aac6259a73754ca20e73eff70b5bd671be94872df1913c3d6b980ce811ea8722894029de3e3b7eaa1b0842b679089c61ce4b14ba91b9679aa8cfb872dba63fa5804b4ad1ee072a01b3af055386faaf5af0835ac7e4778af7649c019678d52a237dce5370b9e23d1defd3dbb8b675ed775bcfa45f98b577159f224114fb22d28690dd870b42cd0a4b6037bf70205f9f93ac6fb7041c851253f5e947c9abebbcdd2c5677fcc83ef00a876c13d9eadc7129d865fba10a91a28b072d63f78c766c4a783b962262ee928548f4d224362bbdcdc4d404444c7dd27f4e0e27eb882303206c87507cf8c911d7e8ab8b5483cc261c2010875259adddd6417ab3136fb744f48780e3a16a5b8fef3b9c3f2e7343f02677e38c4bf5ef5968b5724039977e1ddb68a163acb45e96cdeda18feb49ef0605f9aa10d3571c00d7cba180d18529d86b426423afe9d302f3aaff6158e30cf97f22d006a32b0ce4e3ac91171f7cca59b6aec2994fdff49af32dffc8cea76ff37edc6c80612ed68d0e0c174a31eabbc319d7689291f1dc7ae14b603caefdcff3c8e115bc1cd2eeaede06bb715cbc894fed0aaa1f5831f10fa3b300383be8d08b32470915d564c4e9bd1f8ada747d3a02f2b152dc2ee2a670caff6f29e95d552338bbe46bb76a1844fab36baa08f3ea2c6032d5fd39c906070f26f000ac12bb2f875046313b7cb064510105aebecd9e5b0c09b132b3c4d037289a603e10273c5a28f6879028cd0ecd0f8ea5d5d99561c02c2870e08fa588c6918704ca3c2ec775500d197fc80c7bae4cbf68243b3b3623b04aefeb06eb723dcceb8a4f393394362b16bd5f28ad32ad63cf4025687cf681a445487a7a2877aef3578c88227b433c185b25f09ae11c32068b2ae7eab93e828ccf064abe9cad70a8165eddb33a872d9154fc23345b697713b0f3e318452d7584043be7aa140ce0527d0c1f08576be44060657203dfbce8643fb496a1111303f9009a79cfc791d2d990fb4390fa6aa16eb255b274e459cc1fed3084151c2fdbc41642efbe847453a53262dbda68837dd8dff9ea19cedb6a0cf87ec9bc87cf884bedc843096a6ccaebbd14df898b3ec82371f5624d45776b3e460e67ca868376d2649ca9f3176f8415f460da0bf5433f94f03cc53d0d87f814afbee0526f31f7e1e76d9668912e4396f84accb7f7514253d0d24234a4b9488f379eadbef07888bdac0a5ec9843d11d8f00e7e98bc6d2d0987d184606971d06465a7c62fa0892e94b9ced2a4e987da2fa81b1631d9bf448c26dfe9a1da9d854c49972052dd02e26ff5889c0d175e5d1213225cc6154eac98541adf12a6f8e09ce3842b8bc2a122931309b542086ab0166408734e011491e06580fba89654afeef0db2d3e5cbd7478d754f7a4515f4b077019df71e50fe8bcd9c25fb29d23425a60a3cf9863b8608872ff421c0ace8f1d0d20aab29d02f1df54f3ada7ce5429ea7697995cc39e3179864e2444e3c6325aad7fe7b51fb9cc32b6c044141b5c5a3781ae69cdf621b3627aed668e3314972f14b06b030d8ec9483828990328f58f449c97098a46426d5c0513861714ebd1d2ef75aec4eb4aa17f454c332bc8513ca08ed5d803fa8c89558a786139e9201367693fd3e4f715d93bbe3986df1097c49997dc464167fd7f9f6c11e6c514185a60c698d063e7133e092d54b1493fb4b21c62389ac9cca6e2e1e0ce84f78a55ec48197bb696df0eb97dc90394966e4a714b415be32c8c939150f6a04f884616fcb64dce9e57b57a4ed9650a99430dc862fc0b5322249f5a93fce8c17c73bf8d75bf667fac170447f8d0edf4f311d8f332bec1a3d1cbd5910bf279cec36549a12dbad5ba2883b7650cf3cf48b3089ebfd61f9b2184f3e4eb8dd275967ec8886f018caa5d88d251740a935c550735699d118f9dee7ce2c295caa7007b32037ff3e14c696c2094c90e75df416750db8e802a27e157303558622d060bef4f4a8b5c67310158e1dd573a1189825fa56ec1d144b32659824326eef7c09954a227fd542ebcd464843d92ba415061be469b8e6c9791ff7447c0dc7fd0ea037c1e3576518db21ad0c14726e9b07ab3753eee796aba51efdfab57100d93734c9ba88e1e386a1956578dbcebc11fc830d0522a25cb53465d7e117b6a97ea4451f107a0916aea862e582947633be2f807c7d4137ca01a6933820b7eb826db0bda93470b8c8909a6c744e1d2d067816183756769b9e9801e95f2f885312bede448c6ed1457d9b756397a937a03cda86794c5591bfbcac9722079f5ec8ac1fc7d82ae710203e8aa2eb0489109f5c4651faaae13005799de57d3f2b8e422fa780c1d65bc4491b0eac797c90c5fef1494d3d65ff35aa6d593e8df7b26d80f0a9c8c76f8ddd88359006963815c8fc1e0373ff92257cb1d7ca8bb43ddeeca8ff0065663e7c56b77504f8707ae39331b8dff162646a7e686b2f21c97f2e4cbc3b04f3ae324af181e8cd22381c3c4927cf93951acc37ac915e2c201f5ac98f5ba6b507bda17a57642802c29df2dd2088e98910799033a475553874cbeb911f5ee562dd3c69cbf6e7958e823d4ea18ea7d71a4a40f7f39a5460dd44af2aa716e6671c87811d30dbd70b6afdddd245aadff8ff542eed209fadccad5c2b96b9f32c4a7ca912911491899617a2fe1dc80fa347392ea7285c059f536a77bc2820466aaf1b6eeee7e135ca17554b4120c8660593fee4744d06e4af477d075e92ccce14b7cf70a7a55288bb9a8623e46684d785c099df8e17e2e477594e89e47e0742f159c9747ab2b35c7bf0eb912277472b7d8f5cf57cdc4b343eb917820de47d3919538940b0565812332ede3f36579d03bf5d539c18a989370f9634ff87d0406eb8174b9c2a64efb782d349f966679da2ba00bbbb23a20a323d2ea222b9e26eebe885f72a483a738b098e315921d7ff048df9ed0e148f58b28d933aad803704128e810e4e13fb7fd57ddb0272aa270675d2f863a095863fd2388d3fcfd4bfe9fb545e9c44743f682ab55b740f41ae2a3027eb79fd2590d24b5b8a3cabdb1fd4b49211f8f7d8db9815ce30edd6eb0b454e4de2c634a5455d7dd463183eab71a81c79c3714371e31e4b614bbde19e08c96d0bee3d49bdfc3611446831a92b83c54d83a58872097628022302fc398e6d8ea79e38abc41f5be2b8d619d569d14d068a5a240f1ecbd7a195504d6590fe9eaa7c2b62a1c7a6af8b02808c6d6c36e8c51ef468261b0ba687116c9f9ccb389d993d8dbb8a4a2f50e1a08f4d5efe37455345a2bb6522f99ff9c2a84126139c9d76a0a4c776598fb2b9dbf639affad95023bc4092ed9b405f80d99b5ab573c9bd812be12117291b4aa81033a9fb21cc73b6611c880021410fdea4fb3b4fddc2b2e072e4de6e15d4a8e4de80edd03ffbd3cd881589c9b566f087bae0ea0d7afa7cad7c8cac5b39efcb75ed75ab759d0193212cb5696a4851d52135883e60f610f11b88147817a0309183cc180fa7e87758fbf6b7879850dad18dbfa85c0b30c6f4936895bdd32f9b657bc7568d79b861afb4f957b9a69aab0091adcf2b65178999b40b1d5809836cd2bb51ddce54c422cb6cbe33fad3486cf838479d06b052d2bbc04ade8e48b532ee8bfe6bba29804940df8b97572f04fde2ad5c917bde81757e70d0d5ffb0e2ff45d4387bbfc434f719d68ff32d0727b0e7c4ec0ad578e6517753e31a942e0645c996906fcf5a3d440a2c39422dbe428e0a022be37da362886a167161d84323c44c421bd29d5d09c0319dc8f8db09b7504834ee6cb147f217fad75b820297dd45bea3144d1b978eb2fe8f3bfd9afb6f356ea1f3c8771d1fc50709f4241909ffcf91a859c3c80d35b5faec70e6b1bd8cdf99bc39288c1fe997a18822e23084bde0ad1ce94ae507e64f9ba8257a8db5ab0b337b49f8446465c3a7fd01dc1ded4ce0097d6511e869108832b62dce8f9b7a678b1e1d9c9aaff3ccec3877ad71439145a20a7cafcfafdbd6970843ef6600512c5af1ae0067f4b7eed8e77dc3431c4e5fe09a837666e4b0ce7b09cbf5e41d7cb9a0db2585e050c3d2a19601f295f4add73bea45797841afcf1795484b40af3aadccdb022f0c9a93dadd48b9f4cc77ee926fab9178427bdba7dcb0b92dc7fa3dc3bd0fea5df8b0f9a636d1418f6f35986a0a242a271cac21423ab718ed709ed83cc6983f6f038f614b332a705d14c416badd7fd59cc398ea937c69257c253b4b0ead35a49412a5cfe7956cd14e55c79135c3773c26f9cc1abc642a9eacabe6ebae6867fdd3585f0262fc1734d2d6c6a4778121f0f46ee166f8e5d4b26a46653f22013f06a372de7a01a4bbcaa6e62fcc0cea57362d4483274bc7e2efff45c11d62d362b2d9ba0076cf69009d01c3969bb7a722483c7a205566a2d13e376addc84ff18e6aaedb7e6e4983862623ff688a4f75f2b8f3daa5738e3f60c9fcc6dd61a60f83884b2aca136a8f6274d694f6e12938cb46bd588de3d3ba68df1124d175d03fcc3c0c57c3f05a18ad85b8dea9fa8297f58aa9212da8137dc5c46f9796e5802ff72fffa002fe99961dd1ac1b76e4a2d256080eca41d36b776c6d9d1b565221bc08635240262154aaedcafdbf48ff9850c80742f11c6500855e64ad570d18da69b1e4ee6eebe31594bfada144882ba9527cb5196be61101f13815cfce45fb131874e968128da76e02daf9cb744535d0cb5a02ceb1a79474ee14a17c63720e66c92380c24c2e1ac9d3eac4208402a2ca7fbcad97e0a14f11788f7b2ab66ea2cf32f11b8ca0e0e4fd64a3ae5c24b6bdd1cc569f5218ec07a0ffb155b5bf7ad0156d938e53a3cd715fc6b70d3b3f572303b08c3357fa06a0ab72d351dbd6e5233c1ae6cbadb1107bbcba372c222d7231556bc343a3f007926c63e3a36ad65a639b5ebc7b6bfae4004aa97fb85964456d216a7470a7404fd2152fde69125b5623b07dd58514a95d1cb1b331613a1509e9c1cd4d81a6cd1bcdfd05631b91f8fd0bbda73b2600f3ebc39bd2c7edd3e2f07722fe93d9019b902e1eccacac1d401cc4f14291ecb9a8cc32452b62952a93e5ffd992ee11ad00fd2123d727561e06bf54e2056fef1573818f2ae1bf63f743f5a8d2dd054a798e67eb7ef3719770066fb10a327d8f05f7e3034c29ad6251f15ae623f023e6896e07d9c9d1160ef4c264d8bf10d3f9123193eeac5cca573be48c87ba6da3c1d3d6ca193942b6b653fc5cbaf6666365ee5770d60aac10d41571729dcb5f632246cd07771d8df86e9700f5c122e3d5721e225f5116f38906a2d260a9d88d16b055106e733faa737b7e37c5ec7ca4f3bf9b7254b96177a3b5fd083d7f5c7bc392dea18d30d61a9343860b8bda298e0a59d96abe76e5aa8a1bf93bf380a2b331e5472d9bff406196378569c870a6192d937904992ac43c9d59c89424bf96484a9fb6fa7c37aab19800b081e606bce2f64052d32252cb11a22516660657a5ab0db1e131d9821488466dbb055bcf1183c2f4b965727d7f3da013dbf832190387e796faec09e4f5843f7d3097ed6eff98d98bf9171575dba3cae2823af734a41a13a1aabac508dcc1fd47bbaef3f250ddee660e01f193ec2307d63a569e2739b313fb458fa7824f9a273b8a841441d0bc7aefc327b204dbc13b55934ebec78e7883288b0b", 0x1000, 0x28000080, 0x1}, 0x2dc) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)={0x155, 0x0, &(0x7f0000000580)="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"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1731, 0x5) [ 1918.161334] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1918.168970] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1918.181506] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1918.190191] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1918.194129] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1918.200940] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1918.215932] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:38:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x40000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x63, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:38:47 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x8100, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1918.257638] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1918.270423] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1918.280322] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1918.329346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1918.342819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13012 comm=syz-executor.3 [ 1918.350617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13016 comm=syz-executor.3 16:39:01 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa6, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:01 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:39:01 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80440, 0x29) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:39:01 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x2dfe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r9, 0x0, &(0x7f0000000980)="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", 0x1000, 0x28000080, 0x1}, 0x2dc) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000180)={0x155, 0x0, &(0x7f0000000580)="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"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1731, 0x5) 16:39:01 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x103001, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x6000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x9, 0x0, 0x0, 0xa0d800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/242, 0xf2}, {&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/207, 0xcf}, {&(0x7f0000000300)=""/73, 0x49}], 0x5, 0x1499, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) 16:39:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1932.668983] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1932.690146] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1932.702227] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.705757] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1932.707477] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1932.710455] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.713147] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1932.724487] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1932.743161] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.746911] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1932.748117] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1932.749110] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:01 executing program 2: syz_io_uring_setup(0x18a0, &(0x7f0000000000)={0x0, 0x415a, 0x10, 0x3, 0x1d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r1}}, 0x1) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000001c0)={'macsec0\x00', {0x2, 0x0, @local}}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0xb58, 0x0, 0x7, 0x3, 0x1, {0x0, r1}}, 0x1440f565) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, &(0x7f0000002940)) [ 1932.791719] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1932.793037] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1932.796159] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:01 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1932.854423] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:39:01 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:01 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:39:01 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1932.872223] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1932.879027] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.888411] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1932.892859] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1932.894785] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:01 executing program 2: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x0) r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="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", 0x1000, r1) r4 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r3, r4, 0x0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x32, 0x63, 0x64, 0x65, 0x3c, 0x61, 0x33, 0x34, 0x39, 0x31, 0x37, 0x37, 0x51, 0x38, 0x37, 0x543fb59a6cd4ba05]}, &(0x7f0000001300)={0x0, "d7addd4bd31fcbd2b5c678c0bab17c983a9d0fa1791ebe09862bdc76cd67b20d37a78aa97c8beb885916ddcddce8c12149a7d191b50f0ce9414e2962885e477a", 0x18}, 0x48, r4) r5 = request_key(&(0x7f0000001380)='asymmetric\x00', &(0x7f00000013c0)={'syz', 0x0}, &(0x7f0000001400)='\x00', r1) r6 = add_key$fscrypt_v1(&(0x7f0000001580), &(0x7f00000015c0)={'fscrypt:', @desc4}, &(0x7f0000001600)={0x0, "711f4fdf5c8474d207bb9591325bd6bc03635dc5ffa4a3d7fe168a3e5108179369cb6d730436c07c44240cc43cb769effb29d74758a37a2c27e5df9a0f341696", 0x39}, 0x48, r3) add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x0}, &(0x7f00000014c0)="d2f6ca4722fcb5ab85dea96d821a8459128113c69ecfb7601e3ab33fc95291c31f0d035dafe7820c8d94d1fc0ee52dfc6552178cb06e1527e5048145dc5a8e7b3f6f47063723087ffd45351f19e7eca4ccfd18b1935c4501103f0581b71ce96a724e7ca90bfd5a728bd1b646faa46f043f960299b6e4c5a5f9735dc3fcea62f7464366dd4264f0f0ef838da24da9b66e83ef", 0x92, r6) keyctl$search(0xa, r2, &(0x7f0000001680)='big_key\x00', &(0x7f00000016c0)={'syz', 0x0}, r3) request_key(&(0x7f0000001700)='keyring\x00', &(0x7f0000001740)={'syz', 0x1}, &(0x7f0000001780)=',[\xdb\x00', 0xfffffffffffffff9) r7 = request_key(&(0x7f00000017c0)='dns_resolver\x00', &(0x7f0000001800)={'syz', 0x0}, &(0x7f0000001840)='fscrypt:', 0xfffffffffffffffb) r8 = request_key(&(0x7f0000001940)='keyring\x00', &(0x7f0000001980)={'syz', 0x3}, &(0x7f00000019c0)='\x00', r5) request_key(&(0x7f0000001880)='syzkaller\x00', &(0x7f00000018c0)={'syz', 0x0}, &(0x7f0000001900)='((\\\x00', r8) add_key$keyring(&(0x7f0000001a00), &(0x7f0000001a40)={'syz', 0x3}, 0x0, 0x0, r7) add_key(&(0x7f0000001a80)='trusted\x00', &(0x7f0000001ac0)={'syz', 0x2}, &(0x7f0000001b00)="4e97de8c670162db9dfa1361800fbad045493c9077b8d76bf20a742bdb90cc77d825aefa3547fc0129aff86e2dc0674246aeb4026b45c9b0a0bf835e85a48743324c60687d46f443e969f661078e7490ad92be55e0781c8dbefb623c303e786221997b1f353981a8f9ff249722722fff8523f9e8c381d1f8260511a15cebd2ea93803b8f9b3466bb2c2d5ecbff03d743f209fd86d4f6f8c84e7596926ad72fcf17326f81b7f91216f5868f10b82e385730d8ee9353019727e8681ab868c47238c1642c2b7620144461c446165dd32e929eb9c92f68480a3f471aed4d2d7a2eb3d2a47d9f48e734c842eb49d2", 0xec, r1) request_key(&(0x7f0000001c00)='blacklist\x00', &(0x7f0000001c40)={'syz', 0x0}, &(0x7f0000001c80)='&/^-{-\x00', r6) add_key$keyring(&(0x7f0000001cc0), &(0x7f0000001d00)={'syz', 0x3}, 0x0, 0x0, 0x0) 16:39:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9c0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1932.907054] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1932.932444] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:39:01 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1932.944247] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.948338] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1932.951141] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1932.953052] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1932.957143] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1932.959167] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1932.962794] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:23 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x20}}, './mnt\x00'}) unlinkat(r1, &(0x7f00000003c0)='./mnt/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000240)='./mnt\x00', 0x100, 0x2) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', r2, &(0x7f0000000280)='./mnt/file0\x00', 0x42) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f0000000180)) symlinkat(&(0x7f0000000000)='./mnt\x00', r3, &(0x7f00000001c0)='./mnt\x00') mount$bind(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='./mnt/file0\x00', &(0x7f0000000340), 0xb15001, 0x0) [ 1954.127032] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:39:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:39:23 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:39:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffe, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xec0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8922, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x4, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r10, &(0x7f0000000100)={0x11, 0x4, r11, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x268, 0x0, 0x1, 0x1, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040011) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00'}) [ 1954.146024] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1954.147873] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1954.155975] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1954.170934] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1954.182386] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1954.186414] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1954.195420] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:39:23 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1954.206461] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:23 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33fe0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:23 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x20}}, './mnt\x00'}) unlinkat(r1, &(0x7f00000003c0)='./mnt/file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000240)='./mnt\x00', 0x100, 0x2) move_mount(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', r2, &(0x7f0000000280)='./mnt/file0\x00', 0x42) r3 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f0000000180)) symlinkat(&(0x7f0000000000)='./mnt\x00', r3, &(0x7f00000001c0)='./mnt\x00') mount$bind(&(0x7f00000002c0)='./mnt\x00', &(0x7f0000000300)='./mnt/file0\x00', &(0x7f0000000340), 0xb15001, 0x0) 16:39:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1954.290241] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1954.294284] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1954.308191] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:23 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1954.334231] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1954.343229] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:39:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x200001f4, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1954.348439] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1954.360345] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 1954.372540] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 1954.377011] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1954.379540] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1954.392484] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:39:23 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffe, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1954.412861] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:23 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1954.451149] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1954.457202] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1954.461882] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:39:37 executing program 3: r0 = getpid() r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x5, 0x2, 0xff, 0xc7, 0x0, 0x9, 0x80000, 0x19, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x300, 0x4, 0xffffffff, 0x4, 0x0, 0x1, 0x4, 0x0, 0x6, 0x0, 0x1638}, r0, 0xc, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x4500, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r3, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}]}, 0xb4}}, 0x100) getpid() r4 = syz_open_pts(r2, 0xdc082) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000300)={0x100, {0x21, 0x2, 0x9, 0x5, 0x3}}) clock_gettime(0x0, &(0x7f0000002a80)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f00000028c0)=[{{&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/30, 0x1e}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/105, 0x69}, {&(0x7f0000000640)=""/5, 0x5}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/82, 0x52}, {&(0x7f00000018c0)=""/183, 0xb7}, {&(0x7f0000001980)=""/139, 0x8b}], 0x3, &(0x7f0000001a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001ac0), 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001b40)=""/95, 0x5f}], 0x1, &(0x7f0000001c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001d40)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/182, 0xb6}], 0x1, &(0x7f0000001ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000001f80)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000002000)=""/209, 0xd1}, {&(0x7f0000002100)=""/23, 0x17}, {&(0x7f0000002140)=""/204, 0xcc}, {&(0x7f0000002240)=""/57, 0x39}, {&(0x7f0000002280)}], 0x5, &(0x7f0000002340)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002500)=""/228, 0xe4}], 0x1, &(0x7f0000002640)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000002680)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002700)=""/44, 0x2c}, {&(0x7f0000002740)=""/151, 0x97}], 0x2, &(0x7f0000002840)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x7, 0x40002021, &(0x7f0000002ac0)={r5, r6+10000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002b00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000340)="b672e60bb17d5316bec564498bd2e772f2e02223909e3a", 0x17, r8}, 0x68) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000002bc0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000002cc0)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, 0x1b, 0x200, 0x70bd2c, 0x25dfdbfe, {0x19}, [@typed={0x8, 0x5a, 0x0, 0x0, @u32=0x1000}, @typed={0x8, 0x4, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x58, 0x0, 0x0, @uid=r13}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$FIBMAP(r10, 0x1, &(0x7f0000002dc0)=0xfff) r14 = syz_open_dev$vcsa(&(0x7f0000002e00), 0x0, 0x200000) ioctl$TIOCSPTLCK(r14, 0x40045431, &(0x7f0000002e40)) getpid() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000002e80)={{0x1, 0x1, 0x18, r12, {0x3610}}, './file0\x00'}) perf_event_open(&(0x7f0000002f00)={0x5, 0x80, 0x8, 0xff, 0x1, 0xaf, 0x0, 0x5, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000002ec0), 0x4}, 0x1000, 0x2, 0x8, 0x0, 0x7, 0x8, 0x2, 0x0, 0xacd, 0x0, 0xffffffffffffffe0}, 0x0, 0x8, 0xffffffffffffffff, 0xa) 16:39:37 executing program 2: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000200)={0xa6, 0x29, 0x2, {0x54bb6fab, [{{0x8, 0x0, 0x8}, 0x0, 0x1, 0x7, './file0'}, {{0x1, 0x1}, 0x0, 0x2, 0x7, './file0'}, {{0x20, 0x2, 0x1}, 0x3ff, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x0, 0x81, 0x7, './file0'}, {{0x0, 0x1, 0x7}, 0x8, 0x0, 0x7, './file0'}]}}, 0xa6) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000001480)={@local, @dev={0xac, 0x14, 0x14, 0x42}, @remote}, 0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/236, 0xec}], 0x3, &(0x7f0000000640)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x100) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) close(r1) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@multicast2, @local, @rand_addr=0x64010100}, 0xc) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f00000014c0)={@private=0xa010101, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x31}}, 0xc) sendto$inet(r1, &(0x7f00000000c0)="25cbcf2584228da8e406eef1bd842fe0f6fe62756a7a201f7d0736abed3dc638791cabeaae32df190bfbac1367f54a07ff7ff95699f52c779329e74b8943a4b1c8a75123ef8f3fac938af0cab4950576b8adf03d9ee6a166d5c015a35fb708d99935dbc4643f01210ae95959f8ab0705c597d01102d5f5bc7cd10369a4d0e22c5ecaad19e404d2416f3dd980867812afa40ce63256a355cce21d759c266ed971957bebfe74f1f924de9b8d677cf10da8863d7d5f83b6b3c10be766451cfd08cfc985bcb279f658e7322f538d84b1dec6cdaf0ee5f1abdd544061b6fd5610524b099ded77", 0xe4, 0x2048001, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=@v2={0x5, 0x3, 0x3, 0x7ff, 0x1e, "69ade4ba9133caf6bca8c14b256eba1972db39b3b72aac1468b0a783f22d"}, 0x27, 0x0) readv(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="0100003e0500004058", @ANYRES32, @ANYBLOB="2fbb07f8c856649e2bd83b34"]) 16:39:37 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7ffff000, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 1: mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000140)="ee968433bcff5e13084c71a5779aad1f8a2c52eeffe263c729ccca4cab4c07d12cc1981a5c7d03a1fbea2f79f6361e369229db302043ce2a5447a671a5d5c2bf268e2704f01761ca985414b01e6b38f6ceea0e963c5ae3eb1f5836d51c423d11754d32d4861a2cebd3a8f567f3335e15c1c950b16aa9f923616a6b24afa6935f04befc25cc31ae0bea0d6e5e71cde511d937579e8999ee51b69aeab590"}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1968.229892] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1968.239931] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1968.251942] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1968.256145] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 1968.266125] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 1968.284069] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1968.314258] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:39:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1968.333931] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:39:37 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {0x2, 0x400, @local}, {0x2, 0x0, @broadcast}, 0x35a, 0x0, 0x0, 0x0, 0xfc7, 0x0, 0x0, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r4 = syz_io_uring_setup(0x3e01, &(0x7f0000000280)={0x0, 0x18d7, 0x4, 0x1, 0x375, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000380)) fcntl$setlease(r4, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="836accc0310b663812dd992171560dfe7a9df56bff00f01323aa8451763956f499e5250b7c045581c53ab5a8a967b80400eaf60000000000000000009a68ff0000000000", @ANYRES32=r2], 0x10}}], 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(r1, &(0x7f0000002e00)=""/4102) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1968.348126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:37 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:39:37 executing program 2: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00']) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r0, &(0x7f00000008c0)=[{&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f00000002c0)=""/150, 0xfffffffffffffeb3}, {&(0x7f0000000380)=""/224, 0xe0}, {&(0x7f0000000980)=""/177, 0xa1}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/158, 0x94}, {&(0x7f00000006c0)=""/240, 0xf0}, {&(0x7f0000000a40)=""/212, 0xcc}], 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) sync_file_range(r1, 0x7, 0x6000000000, 0x2) mknodat$loop(r0, &(0x7f0000000140)='./mnt\x00', 0x8, 0x1) [ 1968.438392] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:39:37 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1968.452458] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1968.469499] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xf, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1968.604544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13188 comm=syz-executor.5 [ 1968.640255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13193 comm=syz-executor.5 16:39:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:39:55 executing program 2: getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)) 16:39:55 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:55 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:39:55 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:39:55 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:39:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x3, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1986.286049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13209 comm=syz-executor.5 [ 1986.304309] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1986.318611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13216 comm=syz-executor.5 [ 1986.322072] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1986.334010] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:39:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1986.366178] audit: type=1326 audit(1701275995.332:202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 16:39:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x25, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1986.377123] audit: type=1326 audit(1701275995.333:203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 [ 1986.395947] audit: type=1326 audit(1701275995.344:204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 16:39:55 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xf, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1986.415735] audit: type=1326 audit(1701275995.344:205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 [ 1986.435870] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1986.443979] audit: type=1326 audit(1701275995.344:206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 16:39:55 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x4, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1986.461554] audit: type=1326 audit(1701275995.344:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 [ 1986.481771] audit: type=1326 audit(1701275995.348:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 16:39:55 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 1986.498364] audit: type=1326 audit(1701275995.361:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 16:39:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 1986.527141] audit: type=1326 audit(1701275995.361:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 [ 1986.532087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13229 comm=syz-executor.5 16:39:55 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017d7a6258ba56c75d1e95a5538c93e59db033c4af0e0faf85460245a626153664a6036ecdfa290eee9866bd122047a2328b14ce99a3cf3f9c2679b8daf9f3ddb73219a2abcecc0c21721e09464a8fab2d8d7"]) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x81, 0x80, 0x4, 0x0, 0x3140, 0x5a50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x0, 0x400}, 0x100, 0x9, 0x991c, 0x0, 0x7f, 0x7, 0x3, 0x0, 0x6, 0x0, 0xde}, r3, 0x7, r0, 0x2) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8) unshare(0x48020200) [ 1986.549100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13231 comm=syz-executor.5 [ 1986.553310] audit: type=1326 audit(1701275995.361:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13199 comm="syz-executor.2" exe="/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b22f62b19 code=0x7ffc0000 [ 1986.592408] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 1986.621160] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 1986.623448] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:40:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:11 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:40:11 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x5, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xab}, {0xffffffffffffffff}, {}, 0x80000000}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0xc, 0x4) kcmp(0x0, 0xffffffffffffffff, 0x5, r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}, {@access_any}]}}) [ 2002.717284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2002.723169] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=11455 comm=kworker/0:0 [ 2002.737914] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=13259 comm=syz-executor.5 [ 2002.737944] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2002.767409] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2002.778510] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2002.781989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 16:40:11 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:40:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x2) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') creat(&(0x7f0000000200)='./file1\x00', 0x2) chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r2, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x4, 0x0, &(0x7f0000000340)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) fcntl$dupfd(r4, 0x0, r4) sendfile(r1, r3, 0x0, 0x100000001) 16:40:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x37, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2002.855833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13272 comm=syz-executor.5 [ 2002.868238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13275 comm=syz-executor.5 16:40:11 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:40:11 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x25, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x7, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2002.964052] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2002.971901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13286 comm=syz-executor.5 [ 2002.976945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13287 comm=syz-executor.5 [ 2002.992075] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2002.997896] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2003.002331] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.7'. 16:40:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x53, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:26 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) 16:40:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2017.293099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13304 comm=syz-executor.5 [ 2017.295832] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2017.303159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13308 comm=syz-executor.5 [ 2017.308166] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:40:26 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2017.327956] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2017.338921] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:40:26 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x37, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x63, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2017.397781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13318 comm=syz-executor.5 16:40:26 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2017.417139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13319 comm=syz-executor.5 16:40:26 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x53, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfeffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7f, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)=' ', 0x1}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') acct(&(0x7f0000000000)='./file0\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) readv(r0, &(0x7f0000000280), 0x1000000000000048) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x6, 0x6, &(0x7f0000000680)=[{&(0x7f0000000240)="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", 0xfc, 0x3ff}, {&(0x7f0000000340)="111b3aaf6d6a138973ad73bf6e7012bf741eedc5dba0b923cbb8db90f7b29d445486d50e1e16ab3d81fad4ab9d5d13b04beadc979fec5c6d14647dc44ffc46f47bc60daa9263dff0fafddcda2a8cfb3ec811c0477d75825030f2f75277f63c2f082c825455579257a00104171192d4b22877d360b8537ded7c6e033929dab3f3f33a985f4e67a827d7fa1a3caf", 0x8d}, {&(0x7f0000000480)="88268ec8bfd304023ace10865b24e4fdbcf870200ef3788f67573888e3797a92027872da5e9a30a9832598e20ab60b27eaf1cd512b4202337a9e7bb4ecfa4516e826e5837759", 0x46, 0x2}, {&(0x7f0000000500)="5a0ffd20a6b8756aed7bf0521c3375ab2a700a48589974e3a5c59620f199daf452d3dcaa3aa9e466b0c326e36fd4872635cb27272e5e2862f689109e64b6277a188bb84f91e285f92889c81ca20bd208196d73c8cf4d08e5084d6ae416103cc165445b314acc210a7241d16b46d203f080af66c2ba27a3a0f60182d2f39f05f81ad6ac640dbffcfaf1d93f275117b53d4bcf3211f5c20d7f91752ccc44aa19ef42b9eecb2842a88052488b2bea66b5585de815a941d839e9e306ac1a40fe14a9", 0xc0, 0xfffffffffffffcd9}, {&(0x7f00000001c0)="32868ed522d4be6292df", 0xa}, {&(0x7f00000005c0)="13759bfaee17ea3dc79aa34dd80ff087429dd97b6182e8b81ba1fe495f8133bec018511f158ce6e433c3296fba5ee0f18241e7f4154b7f30deff825acbb57dda9741ebd826a4265d8c23cfb77d9405fee1585a7599ffcff1f91677673d0313fe15df700a39e9a8a2fc392bbe98ad823eb7ea634e0712369ecb591062afb2d0fb65", 0x81, 0x9}], 0x20c00, &(0x7f0000000400)={[{@shortname_winnt}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptmx\x00'}}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x280800, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) chown(&(0x7f0000000ac0)='./file0\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000740)={0xcb, "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"}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) openat(r3, &(0x7f0000000980)='./file1\x00', 0x614000, 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000b00)=ANY=[@ANYBLOB="010000e3cf00000018000000d84e1cab534887092ab06a00f73104ce20b5b9febb833a53b856c1c84915ceea90eda5c09f458076166a5ac337b8fda9522ee8714063398ce5bbdf9f58fe1872d15d50b7d9b19df2c26791e38f54be7928fa8498eea37c4bdcfbbf14f1cce6b944b4d7b5b8d937b4c40b8395b4b30ed31ae4a97017e430a9f6353876275009c43bc0127a9ff34c38daaad41046b2ddbc214f21bd80d73aeced567932b1f3ec0e47bbfc3328ddf7", @ANYRES32=r2, @ANYBLOB="ff000000000000002e2f66696c653100"]) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r4, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f0000000a80)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x1, 0x2, &(0x7f00000009c0)="46e442578cf60379ef241d2c74a34c0141998b69fd44b7d37c213cfe0b172ec7db9234791f879f72648d11f841f68fbb64443ed3acc6ad32afdf6200cab2c6dbb601ea3de3c4f540d6be4750054ae38f447930facc96ccd0f864fbf49ed0ef346a33483e6d110b89800ea80fa091b6dedebb6a93080ac20bd506739b6aac22eef01bc691797792b5d87c", 0xffffffff, 0x0, 0x1, {0x800}}, 0x1) 16:40:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2017.512430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13334 comm=syz-executor.5 [ 2017.519925] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2017.525714] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13338 comm=syz-executor.5 [ 2017.539530] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2017.555034] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2031.590279] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2031.594328] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2031.596958] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:40:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001480)={0x1, 0x2000, 0xcf0, 0x1000, 0x11, "921bdcc8fd6197d11988ebee5167c6cef047d1"}) ioctl$KDSKBENT(r1, 0x5413, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x98, 0x7f, 0x82, 0x0, 0x882, 0xc0040, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x401, 0x6}, 0x480, 0x3, 0x7fff, 0x5, 0x100000001, 0x6, 0x6, 0x0, 0x2d, 0x0, 0x7}, 0x0, 0x1, r3, 0x2) 16:40:40 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa6, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:40:40 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xb, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:40:40 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x63, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2031.631886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13354 comm=syz-executor.5 [ 2031.663092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13364 comm=syz-executor.5 16:40:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:40:40 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa6, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:40:40 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:40 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xc, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2031.797132] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2031.813045] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2031.815364] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2031.841532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13375 comm=syz-executor.5 [ 2031.870008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13381 comm=syz-executor.5 16:40:40 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:40:40 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (fail_nth: 1) 16:40:40 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2031.928010] FAULT_INJECTION: forcing a failure. [ 2031.928010] name failslab, interval 1, probability 0, space 0, times 0 [ 2031.930674] CPU: 1 PID: 13383 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2031.932082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2031.933755] Call Trace: [ 2031.934290] dump_stack+0x107/0x167 [ 2031.935044] should_fail.cold+0x5/0xa [ 2031.935823] ? kernfs_fop_write_iter+0x235/0x510 [ 2031.936787] should_failslab+0x5/0x20 [ 2031.937559] __kmalloc+0x72/0x390 [ 2031.938271] kernfs_fop_write_iter+0x235/0x510 [ 2031.939213] ? iov_iter_init+0x3c/0x130 [ 2031.940019] new_sync_write+0x42c/0x660 [ 2031.940820] ? new_sync_read+0x6f0/0x6f0 [ 2031.941640] ? ksys_write+0x12d/0x260 [ 2031.942409] ? lock_release+0x680/0x680 [ 2031.943218] ? selinux_file_permission+0x92/0x520 [ 2031.944194] ? __fget_files+0x296/0x4c0 [ 2031.945010] vfs_write+0x747/0xa70 [ 2031.945739] ksys_write+0x12d/0x260 [ 2031.946477] ? __ia32_sys_read+0xb0/0xb0 [ 2031.947320] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2031.948383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2031.949427] do_syscall_64+0x33/0x40 [ 2031.950185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2031.951223] RIP: 0033:0x7f69e32a3b19 [ 2031.951980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2031.955654] RSP: 002b:00007f69e0819188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2031.957195] RAX: ffffffffffffffda RBX: 00007f69e33b6f60 RCX: 00007f69e32a3b19 [ 2031.958636] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000003 [ 2031.960094] RBP: 00007f69e08191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2031.961535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2031.962983] R13: 00007ffdf395f36f R14: 00007f69e0819300 R15: 0000000000022000 16:40:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:40:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:40:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:40:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9c0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xd, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9c0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (fail_nth: 2) [ 2049.031554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=13399 comm=syz-executor.5 [ 2049.035326] FAULT_INJECTION: forcing a failure. [ 2049.035326] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.037750] CPU: 0 PID: 13402 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2049.039203] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2049.040936] Call Trace: [ 2049.041489] dump_stack+0x107/0x167 [ 2049.042260] should_fail.cold+0x5/0xa [ 2049.043084] ? create_object.isra.0+0x3a/0xa20 [ 2049.044041] should_failslab+0x5/0x20 [ 2049.044843] kmem_cache_alloc+0x5b/0x310 [ 2049.045695] create_object.isra.0+0x3a/0xa20 [ 2049.046608] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2049.047673] __kmalloc+0x16e/0x390 [ 2049.048424] kernfs_fop_write_iter+0x235/0x510 [ 2049.049371] ? iov_iter_init+0x3c/0x130 [ 2049.050201] new_sync_write+0x42c/0x660 [ 2049.051043] ? new_sync_read+0x6f0/0x6f0 [ 2049.051890] ? ksys_write+0x12d/0x260 [ 2049.052680] ? lock_release+0x680/0x680 [ 2049.053505] ? selinux_file_permission+0x92/0x520 [ 2049.054504] ? __fget_files+0x296/0x4c0 [ 2049.055357] vfs_write+0x747/0xa70 [ 2049.056104] ksys_write+0x12d/0x260 [ 2049.056862] ? __ia32_sys_read+0xb0/0xb0 [ 2049.057712] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2049.058799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2049.059884] do_syscall_64+0x33/0x40 [ 2049.060660] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2049.061726] RIP: 0033:0x7f69e32a3b19 [ 2049.062506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2049.066336] RSP: 002b:00007f69e0819188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2049.066901] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2049.067922] RAX: ffffffffffffffda RBX: 00007f69e33b6f60 RCX: 00007f69e32a3b19 [ 2049.067966] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000003 [ 2049.067978] RBP: 00007f69e08191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2049.067990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.068001] R13: 00007ffdf395f36f R14: 00007f69e0819300 R15: 0000000000022000 [ 2049.081434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=13409 comm=syz-executor.5 16:40:58 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) [ 2049.124545] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:40:58 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xec0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:40:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xec0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2049.138074] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:40:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xe, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2049.228979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13419 comm=syz-executor.5 16:40:58 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2049.319000] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2049.329079] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2049.340026] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:41:14 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:41:14 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33fe0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) 16:41:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33fe0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xf, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (fail_nth: 3) [ 2065.175069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13444 comm=syz-executor.5 [ 2065.175771] FAULT_INJECTION: forcing a failure. [ 2065.175771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.180166] CPU: 0 PID: 13445 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2065.181603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.183332] Call Trace: [ 2065.183884] dump_stack+0x107/0x167 [ 2065.184646] should_fail.cold+0x5/0xa [ 2065.185449] _copy_from_iter+0x202/0xe80 [ 2065.186313] ? __check_object_size+0x319/0x440 [ 2065.187294] kernfs_fop_write_iter+0x194/0x510 [ 2065.188247] ? iov_iter_init+0x3c/0x130 [ 2065.189080] new_sync_write+0x42c/0x660 [ 2065.189926] ? new_sync_read+0x6f0/0x6f0 [ 2065.190782] ? ksys_write+0x12d/0x260 [ 2065.191614] ? lock_release+0x680/0x680 [ 2065.192454] ? selinux_file_permission+0x92/0x520 [ 2065.193467] ? __fget_files+0x296/0x4c0 [ 2065.194304] vfs_write+0x747/0xa70 [ 2065.195049] ksys_write+0x12d/0x260 [ 2065.195818] ? __ia32_sys_read+0xb0/0xb0 [ 2065.196653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2065.197725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.198792] do_syscall_64+0x33/0x40 [ 2065.199565] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.200642] RIP: 0033:0x7f69e32a3b19 [ 2065.201447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2065.201729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13447 comm=syz-executor.5 [ 2065.205272] RSP: 002b:00007f69e0819188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2065.205294] RAX: ffffffffffffffda RBX: 00007f69e33b6f60 RCX: 00007f69e32a3b19 [ 2065.205315] RDX: 000000000000fdef RSI: 0000000020000040 RDI: 0000000000000003 [ 2065.212196] RBP: 00007f69e08191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2065.213671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.215150] R13: 00007ffdf395f36f R14: 00007f69e0819300 R15: 0000000000022000 16:41:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x200001f4, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x200001f4, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:41:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) (fail_nth: 4) 16:41:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffe, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2065.373271] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2065.393532] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:41:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7ffff000, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2065.403323] FAULT_INJECTION: forcing a failure. [ 2065.403323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2065.405747] CPU: 1 PID: 13462 Comm: syz-executor.1 Not tainted 5.10.201 #1 [ 2065.407168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2065.408821] Call Trace: [ 2065.409349] dump_stack+0x107/0x167 [ 2065.410077] should_fail.cold+0x5/0xa [ 2065.410845] _copy_to_user+0x2e/0x180 [ 2065.411624] simple_read_from_buffer+0xcc/0x160 [ 2065.412553] proc_fail_nth_read+0x198/0x230 [ 2065.413416] ? proc_sessionid_read+0x230/0x230 [ 2065.414322] ? security_file_permission+0x24e/0x570 [ 2065.415410] ? perf_trace_initcall_start+0x101/0x380 [ 2065.416551] ? proc_sessionid_read+0x230/0x230 [ 2065.417571] vfs_read+0x228/0x580 [ 2065.418358] ksys_read+0x12d/0x260 [ 2065.419155] ? vfs_write+0xa70/0xa70 [ 2065.420006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2065.421177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2065.422331] do_syscall_64+0x33/0x40 [ 2065.423185] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2065.424330] RIP: 0033:0x7f69e325669c [ 2065.425110] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2065.425170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2065.430759] RSP: 002b:00007f69e0819170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2065.432460] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f69e325669c [ 2065.434038] RDX: 000000000000000f RSI: 00007f69e08191e0 RDI: 0000000000000004 [ 2065.435639] RBP: 00007f69e08191d0 R08: 0000000000000000 R09: 0000000000000000 [ 2065.437221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2065.438806] R13: 00007ffdf395f36f R14: 00007f69e0819300 R15: 0000000000022000 [ 2065.444203] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:41:14 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7ffff000, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2065.464005] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:41:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:41:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:41:29 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2080.757949] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:41:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2080.782940] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2080.796056] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2080.799787] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2080.802983] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:41:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:41:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x25, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x2000fe2f) 16:41:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:29 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2080.923414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2080.940432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13512 comm=syz-executor.4 [ 2080.945152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13510 comm=syz-executor.7 16:41:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2080.964033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13518 comm=syz-executor.4 [ 2080.969025] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_create_cis={{0x2064, 0x21}, {0x8, [{0x3877, 0x1}, {0x101, 0xac91}, {0x4240, 0x1}, {0xf800, 0x1}, {0x8000}, {0x4, 0x6}, {0x1f, 0x2}, {0x401, 0x8000}]}}}, 0x25) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000140)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x0, "c87346", 0x0, 0x7}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/sda', 0x622402, 0x1aa) 16:41:44 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x3, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:44 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:41:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x3, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x3, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2095.753310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13533 comm=syz-executor.4 [ 2095.757024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13534 comm=syz-executor.4 [ 2095.767894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=13532 comm=syz-executor.7 16:41:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x4177) 16:41:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2f, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x4, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2095.791978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13542 comm=syz-executor.5 [ 2095.830187] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13549 comm=syz-executor.4 16:41:44 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x0, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2095.837627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13550 comm=syz-executor.4 16:41:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x5e, @broadcast, 0x4e23, 0x2, 'rr\x00', 0x2, 0x7, 0x24}, 0x2c) io_uring_setup(0xada, &(0x7f00000000c0)={0x0, 0x12fc, 0x20, 0x400003, 0xc6, 0x0, r0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r2, 0x0) syz_io_uring_complete(r3) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'bond0\x00'}}}, 0x1) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r3, r6, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0xffff, 0xe, 0x1, {0x0, r8, r1}}, 0x16c) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:41:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x52, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x4, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2095.918526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=13559 comm=syz-executor.7 16:41:59 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) [ 2110.757534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=13575 comm=syz-executor.7 16:41:59 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x4, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x53, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x5, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x5, 0x3ff, 0x8, 0x401, 0xf, "073782e704115264"}) close(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) openat(r3, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:41:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:41:59 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2110.771909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=13579 comm=syz-executor.5 16:41:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x5, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2110.781231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=13580 comm=syz-executor.4 [ 2110.802229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=13587 comm=syz-executor.5 16:41:59 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:41:59 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:41:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r1 = dup3(0xffffffffffffffff, r0, 0x41c40556080299e4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/225, 0xe1}], 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/scsi_generic', 0x140, 0xae) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0xfdef) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 16:41:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x73, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2110.961548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13599 comm=syz-executor.7 [ 2110.966301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13600 comm=syz-executor.4 [ 2110.985268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13603 comm=syz-executor.4 16:41:59 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2111.001270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13606 comm=syz-executor.5 16:41:59 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:42:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x7, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x12}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x25}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x5c}}, 0x1) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x0, 0x70bd28, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4011}, 0x4000010) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000040)=0x5) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 16:42:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x7, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) (fail_nth: 1) [ 2125.051995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=13617 comm=syz-executor.5 [ 2125.057485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13621 comm=syz-executor.4 [ 2125.067317] FAULT_INJECTION: forcing a failure. [ 2125.067317] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.069854] CPU: 0 PID: 13631 Comm: syz-executor.2 Not tainted 5.10.201 #1 [ 2125.071332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.073125] Call Trace: [ 2125.073689] dump_stack+0x107/0x167 [ 2125.074468] should_fail.cold+0x5/0xa [ 2125.075126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13629 comm=syz-executor.7 [ 2125.075307] ? kernfs_fop_write_iter+0x235/0x510 [ 2125.078832] should_failslab+0x5/0x20 [ 2125.079635] __kmalloc+0x72/0x390 [ 2125.080381] kernfs_fop_write_iter+0x235/0x510 [ 2125.081332] ? iov_iter_init+0x3c/0x130 [ 2125.082172] new_sync_write+0x42c/0x660 [ 2125.083035] ? new_sync_read+0x6f0/0x6f0 [ 2125.083901] ? ksys_write+0x12d/0x260 [ 2125.084719] ? lock_release+0x680/0x680 [ 2125.085569] ? selinux_file_permission+0x92/0x520 [ 2125.086600] ? __fget_files+0x296/0x4c0 [ 2125.087457] vfs_write+0x747/0xa70 [ 2125.088248] ksys_write+0x12d/0x260 [ 2125.089027] ? __ia32_sys_read+0xb0/0xb0 [ 2125.089894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.091010] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.092123] do_syscall_64+0x33/0x40 [ 2125.092932] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.094014] RIP: 0033:0x7f5b22f62b19 [ 2125.094799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.098732] RSP: 002b:00007f5b204d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2125.100350] RAX: ffffffffffffffda RBX: 00007f5b23075f60 RCX: 00007f5b22f62b19 [ 2125.101862] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2125.103368] RBP: 00007f5b204d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.104877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.106361] R13: 00007fffed7aa8cf R14: 00007f5b204d8300 R15: 0000000000022000 [ 2125.119234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=13637 comm=syz-executor.4 [ 2125.123790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=13636 comm=syz-executor.5 16:42:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x8, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f00000000c0)={{}, {@void, @max}}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fcntl$getown(r3, 0x9) 16:42:14 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2125.274967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13648 comm=syz-executor.7 [ 2125.298173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13651 comm=syz-executor.4 16:42:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) (fail_nth: 2) 16:42:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2125.408948] FAULT_INJECTION: forcing a failure. [ 2125.408948] name failslab, interval 1, probability 0, space 0, times 0 [ 2125.411459] CPU: 0 PID: 13657 Comm: syz-executor.2 Not tainted 5.10.201 #1 [ 2125.412939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2125.414676] Call Trace: [ 2125.415242] dump_stack+0x107/0x167 [ 2125.416030] should_fail.cold+0x5/0xa [ 2125.416831] ? create_object.isra.0+0x3a/0xa20 [ 2125.417799] should_failslab+0x5/0x20 [ 2125.418592] kmem_cache_alloc+0x5b/0x310 [ 2125.419448] create_object.isra.0+0x3a/0xa20 [ 2125.420404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2125.421475] __kmalloc+0x16e/0x390 [ 2125.422249] kernfs_fop_write_iter+0x235/0x510 [ 2125.423215] ? iov_iter_init+0x3c/0x130 [ 2125.424085] new_sync_write+0x42c/0x660 [ 2125.424923] ? new_sync_read+0x6f0/0x6f0 [ 2125.425795] ? ksys_write+0x12d/0x260 [ 2125.426606] ? lock_release+0x680/0x680 [ 2125.427452] ? selinux_file_permission+0x92/0x520 [ 2125.428478] ? __fget_files+0x296/0x4c0 [ 2125.429340] vfs_write+0x747/0xa70 [ 2125.430095] ksys_write+0x12d/0x260 [ 2125.430860] ? __ia32_sys_read+0xb0/0xb0 [ 2125.431739] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2125.432887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2125.433988] do_syscall_64+0x33/0x40 [ 2125.434773] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2125.435858] RIP: 0033:0x7f5b22f62b19 [ 2125.436641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2125.440500] RSP: 002b:00007f5b204d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2125.442086] RAX: ffffffffffffffda RBX: 00007f5b23075f60 RCX: 00007f5b22f62b19 [ 2125.443573] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2125.445087] RBP: 00007f5b204d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2125.446574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.448097] R13: 00007fffed7aa8cf R14: 00007f5b204d8300 R15: 0000000000022000 16:42:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x5, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:27 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0x22902, 0x90) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xffffffffffffffb7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0xfffffffe, 0x4) 16:42:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) (fail_nth: 3) [ 2138.893237] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2138.894137] FAULT_INJECTION: forcing a failure. [ 2138.894137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2138.894865] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2138.896649] CPU: 1 PID: 13670 Comm: syz-executor.2 Not tainted 5.10.201 #1 [ 2138.897718] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2138.898853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2138.898861] Call Trace: [ 2138.898893] dump_stack+0x107/0x167 [ 2138.903614] should_fail.cold+0x5/0xa [ 2138.904405] _copy_from_iter+0x202/0xe80 [ 2138.905244] ? __check_object_size+0x319/0x440 [ 2138.906184] kernfs_fop_write_iter+0x194/0x510 [ 2138.907116] ? iov_iter_init+0x3c/0x130 [ 2138.907946] new_sync_write+0x42c/0x660 [ 2138.908776] ? new_sync_read+0x6f0/0x6f0 [ 2138.909614] ? ksys_write+0x12d/0x260 [ 2138.910405] ? lock_release+0x680/0x680 [ 2138.911229] ? selinux_file_permission+0x92/0x520 [ 2138.912250] ? __fget_files+0x296/0x4c0 [ 2138.913084] vfs_write+0x747/0xa70 [ 2138.913841] ksys_write+0x12d/0x260 [ 2138.914599] ? __ia32_sys_read+0xb0/0xb0 [ 2138.915440] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2138.916521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2138.917577] do_syscall_64+0x33/0x40 [ 2138.918342] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2138.919380] RIP: 0033:0x7f5b22f62b19 [ 2138.920138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2138.923919] RSP: 002b:00007f5b204d8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2138.925487] RAX: ffffffffffffffda RBX: 00007f5b23075f60 RCX: 00007f5b22f62b19 [ 2138.926973] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 2138.928465] RBP: 00007f5b204d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2138.929944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.931427] R13: 00007fffed7aa8cf R14: 00007f5b204d8300 R15: 0000000000022000 [ 2138.943808] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2138.957963] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2138.959693] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2138.966333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13679 comm=syz-executor.4 [ 2138.969476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=13678 comm=syz-executor.7 16:42:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x8, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xb, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:28 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:28 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140052466eea67ffec30feff2f", @ANYRES16=r0, @ANYBLOB="00012dbd7000ffdbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) pipe(&(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003680)={'gretap0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000036c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003700)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000037c0)={'syztnl0\x00', &(0x7f0000003740)={'syztnl1\x00', 0x0, 0x29, 0x4, 0xc8, 0x7, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x80, 0x1, 0xff}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80200000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf256000000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x8400}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r1) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1044000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7402d12ad69768ed23b2dc5135dbf90000000000", @ANYRES16=r10, @ANYBLOB="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"], 0x274}, 0x1, 0x0, 0x0, 0x24041880}, 0x4048040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000100)={0x11, 0x4, r11, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000003a40)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003a00)={&(0x7f0000000180)={0x200, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x200}, 0x1, 0x0, 0x0, 0xc084}, 0x20000000) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r12, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2139.074352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13692 comm=syz-executor.7 16:42:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2139.098394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13696 comm=syz-executor.4 16:42:28 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) (fail_nth: 4) [ 2139.121034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2139.126427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=13702 comm=syz-executor.4 [ 2139.128378] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:42:28 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xb, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2139.141992] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2139.143096] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2139.158089] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2139.165150] FAULT_INJECTION: forcing a failure. [ 2139.165150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2139.166530] CPU: 0 PID: 13707 Comm: syz-executor.2 Not tainted 5.10.201 #1 [ 2139.167297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2139.168256] Call Trace: [ 2139.168554] dump_stack+0x107/0x167 [ 2139.168979] should_fail.cold+0x5/0xa [ 2139.169419] _copy_to_user+0x2e/0x180 [ 2139.169865] simple_read_from_buffer+0xcc/0x160 [ 2139.170386] proc_fail_nth_read+0x198/0x230 [ 2139.170867] ? proc_sessionid_read+0x230/0x230 [ 2139.171374] ? security_file_permission+0x24e/0x570 [ 2139.171931] ? perf_trace_initcall_start+0x101/0x380 [ 2139.172514] ? proc_sessionid_read+0x230/0x230 [ 2139.173024] vfs_read+0x228/0x580 [ 2139.173412] ksys_read+0x12d/0x260 [ 2139.173828] ? vfs_write+0xa70/0xa70 [ 2139.174246] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2139.174753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2139.174827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2139.174847] do_syscall_64+0x33/0x40 [ 2139.177553] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2139.178115] RIP: 0033:0x7f5b22f1569c [ 2139.178533] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2139.180583] RSP: 002b:00007f5b204d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2139.181456] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5b22f1569c [ 2139.182233] RDX: 000000000000000f RSI: 00007f5b204d81e0 RDI: 0000000000000004 [ 2139.183018] RBP: 00007f5b204d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2139.183833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2139.184651] R13: 00007fffed7aa8cf R14: 00007f5b204d8300 R15: 0000000000022000 [ 2139.185745] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2139.186649] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2139.191866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13709 comm=syz-executor.7 16:42:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xb, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:42:41 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) r3 = getpgrp(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/ipc\x00') r4 = getpid() clone3(&(0x7f0000000500)={0x22000800, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, {0x1c}, &(0x7f0000000340)=""/160, 0xa0, &(0x7f0000000400)=""/185, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3, {r0}}, 0x58) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)) clone3(&(0x7f0000000600)={0x101000000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x2d}, &(0x7f00000000c0)=""/46, 0x2e, &(0x7f0000001880)=""/249, &(0x7f00000005c0)=[r2, r2, 0x0, r3, 0xffffffffffffffff, r6, r4, r5, r6], 0x9, {r0}}, 0x58) ioctl$sock_bt_hci(r1, 0x5, &(0x7f0000000780)="ac5eea4d54ae4f3ed8385e03569a9b4b7b59ac71b94851889f93433282638cc13d9354ebad0ae6ec8e30b2179942884526015a7356f46a956a187cc83c919c628f1668fb0535e2fe49655ebba717b32ec8f664203330322ba08584c9a5f1b5653970633f8267991b3600abeff282ebf8c3bc113e8aa388200a7eacd91dfdd8b1ba6b5e866b82e167b92ba642a6873b51d799212975579a3e33089539f6ae47092109a814418a88bf3dfbfd2a38aa9f4b6d17dae9dc5f3327b173b03c8c47d758cc56194310f6f5cb2f7810b495d8ab679882fa0f94297294a8b0d5ed2b77b21d57eba508ca8f7efebe095b631db5816ae834e710a8f7e4a0303cd1c55313ceb9292efcb1eb5d90bc07688588fb692ad283685d1d40a58b0501f7509fbac1880e011a254212392ebdc0846ce953ae2f064683d6b0a05d74562d2800260b834d1ec64196a942f72c884fc1f57c64b9f0a40638c93600bdb55464a2e7a507752ac2df56b3ddf07ba14fa39a809973763c2a20146aeced2895a11824c76a55daac5bc35d84b12d1326084d3c0c0ba73808a6a14000764fdbc7a0e40a98aef9eafebc2386367ac6601da95c843fbb6586f09e4e177c6b4e424dc899e667e0459e96b3b871baa9d646197dba709506c5b13b6e94624616a6c17728a02665f6099000a8ac8f61e657411b947d3b520899b005b98c88f817efd31eb19e0e2c915c64af225b0fcb76624a304d7e7275c8883ff4b932d9e0ce34bddd0772e1b9f9c2b30980f0702868b45e71431208c8c702c4f67e2906a2ee2013dff3699a4ac7d288799fed312b748994cece73e3716d5923188069ddd85a8fd87ffcaf3d089a2a977e9c03f1851ee44ffb8d8cc3a53d3fa2c1a61c8bc86d25420440e3e6cd03fd00377abd740018f6d41423d2cb3b60acde20d35c1ed0daa597a99020c905489c439b97bd093c05ac31da110642c540c5ad18c6b388a66aaaf88bbe2fe04ee5ad1beb2a0eb256fed3e85d84c844d6596230975970caaf444d5f6724fc674ab3039d62f6daf2e9b1988829305346680c7e44e1d742ceb9d73ef1804e9d127548b7e0ba26c2349d39a178925cad9b38643cfcb01c3935f9a7d69671e2c12fae02105f97c1104c1cf1c529880c7f82964ed16d1ba103ea7fbd9227f219f3e7f5f43eb4e14d6ace0f6d7e9f119efcc5fd687c54f361d3d541d46c6d34ff0b44a8c58028dd41ae658ec3b82094866535c6030454690105600ec6c46f55fd85dd6360ffc8b1c2c042cedba753ffc4c54fd021b12d077efd9325a1756b2a414cd2f147e4fafce714f3c713d2d220f85215466a028de8a2d0873f3cc261853eb3ede7ccb6f06ff81c676597e64c482e58af7ac15be9450c3f799e4426688a75a88faf2c330f8c5ab7f57bdd587468b4610872f2eb0c440337da69388c5f280d3aebf562f67c01045e784880375c9adcd3ddcedacea87e083d3ea0ec7cee402b43147b7e03d3b0688ef4dfcfeeef142c53573573b34cce2c235762c3b23c522833e579a0ded216c73165d1d6ffadbc705545f08ea5436e6dd662e5fe409d50afad29575acc2b764e719e4ca41e9dbbb371800c310574e1101a8f34c380952707681e2f88b70dd459712ec9c32435b268054ea46524f546dac96330eeee8747695f0f16a2a92bccf5af2908ae3644399d25be3f4b6afd7b66c4ec4d57eb52ced0365ab07001802aec9356a5248cbeef1202592b276f77968b83e4d58bd9ea8c2b1526b377c293640281409194193b8c5c40e3f05b0a54e2e97988cf21750205887e66510e3687a3020d73e0166966712e4f002bbb100f42b58d05e3f379c31acabc21c27bf5bad28dba943d73d4d9730870196ddeaf9b2c20323e392d2e561410939d0a39111543a91e0c08fa4bdc6da66f9bf1f7e5c0aa5896eb3c10c77ffc5982ca8da76e5f6a30a2739c8776d3f9fe4ae58e93577c48b0846a46223a907f7ce21f821d919c36f25c3780f9ed09a2a789ff6d00f6d2aed844f1eb5bea174fa550fb42e31a0543b1a8d8d0ae8eff26432e5d7893f79d8d9fcaf1fe751b6b4344e2ce83c073483f2acb53b0067780d93405fc5eb4c56a822f4ca21c6993e2bb74ef65b92aef203a56cd51bf7cdfd9af527ae64765a5c9116295a6e107ff437dd82e322bd556063cf7dc409ba2f396fa579ec5d1549c1e29738a4db0a277efa5241c36cce1ab7f075f1cf29dc93fc1f2737a37e31d653ac7120758d963dc5f4e1b981f45a1ee3bf6e416ae1b91a2960a75190590f64556197a838844955a74e9a79165fee874e6c509d1df6c746c625cd03651a55c4fed68a86e425f1876b6ff3c12c664926608e4d6a4643a35124fbcd3d4189235695fc8594abffa33363f32d58c039f4cd30c9ae03d16c7eb09a687a4ea4089e827887319138ed7114bdeafd36d86b744bf6debff3e16951c12d71eb4c4efff883455585ab90016319b9f874152348415c19ac4f45e1665409f464ac0c293cade1f36fa03bafe40ae0426430e629189f19071bec08c9e54184b38e1a2966e7d96d2d16c00e42a9887f4c26630b24f36d2d5c60abcc930713c606601a77e475d3c59420b8a43f27d77b3ccec08992dafa5b1ca3c485399edf29f68bb8fff897b50f6d0246f6ce5cf9093a71f89dc6b14c67de95927ed649eaefccba338a8bd200ef7b69b520eb4d2e537862d18f1f9cc9a17227b233cabb534f1e9bf6f5680a5132d93291714de91698b265f4f70de51a44bac08e76552b94610a4e5a1717efb840c7d6530cc79268f6a05000a6f78e7f84891b8168daf154ee545ddfab9fb190fc1071e6f698539cfac925301d3470c90256b47b4913afa033a3e461141c0357ae7707208e549725057eeeb9abc0577e5e462e7a3dc8aadceae2a6a716cda24808e1e1189b18a1370838e7dc3701a2ef0de11fc385395300f07cdf66c2c1004fb3d58f5575ee59a041e1cdbf00c38714d5c9398d9dc036f5c51631e67eee192546ec22cd2ef35a0ec361c41eac22a5ed25632c801af0888c2268effbe4fadbfb1e5a65de3749d06169da1f0bf6f749fcb8efe15b844ac7e12a72afaa750d41732d5de34827c160f92934004588f9b21934e23773fc5306f3300969b795501d597fa65278c70aae814baf94b77066f666f6bd287370f38ed93f2c6d5375b15d537e6b1392758edc88b05e481f0c11d8d8017a6ddc3d3a4ba4b1e69652819667d76efeec491748c6e30436c13d314e10c09868151af1fad357bf7df93d6da45ee9e6e577cfb31b49cf9ad5dfdd7f7241ee3ee791d50a047a72647a24341b270a36346366bb6386ac6ccaf8e0f48a1b125c596014c546ec426394b68dd9e84d7169183569753d81db17383947280f877d323c62d83b871444dec2517bfd85940c031a4c332ac2c488f7c848dbeb10e857f9577f0632713e5da677d9e496f07cdb0f90d998959aac22332df933294d4ff7ac8fc1227871c6909aefa4fd004e20bec18647392e42595c003db202077e46ac75380538c15f00f58e4e05d32f435277e5d26072496ece11e251a1fdfc73028afec5961d576d20e21b974c554d7706630ba1340bdf2a1650d46717eb8d6066b0ac923f8d52ae42ed27ed5280e855110651987ecb11d29463d9f81f7ea024fc23e372f276d09aa4702813f8a58b7d31133e0eb0ce987d5d91753b99ba31689be00c8ce8eebfdf0336e010bf59f5009d62b0c36080a329ee0157e28360399a4fbbcfbf46afa73dd86eb5f9dee06de5a1df86241d7b7354384b4d07ba2da2ff287319f42a0fb86415d5796497bf9ebc21280bded6d47c10daeeaf984588f55a8791a0d8ca672665c191f7595fefb21756753e98b28e416bcbd563fcb3c39932e40de424a2c7442ecad57e792dadf6f25a41bacf9dd3701b2f725f686d01da268d4f20c5c3cbf69426af4c54f14c62f9c485a85cb8ee4518ce2a0b4fa791ee47392f97ede8b80832211980ddd0cf80ed7dc02042e4a8546d4cc428d7820a015f4b880d0eb0e23c05516d92f66562f451824f924e8684ec6f673d30866c07b19d460914b86c9cfbc2b902436bd1ec3bc7d0635f0b793205f895f64b16e1ec9b43115e0b28d87b82ae0d35b0c5ebb0ddddf92992a5270662c287a7f99bd9bc5fe027900e6db5f28577ceaabfc72bee48da096eb77d6ae5634f1082a072558c39a9ce8d816be3ac1b58633e8356261f7142dbf0b9e6423f94b830e8da209077ef399498b19160ee1555a0aa97b568a1492d3ef7182067dd8a18a7c29dc75508cedf4a539929d5d044ae68d5fa394cf40256f19cd00a6e5966a2b669cd45982a89b2f16105697f21500bb95909b03ca7d00ef5faa5df2706fa519e315742efd84dc789f2f8258bb5f75552db122ebaa14d53c7316a7d810a40fa2733cf34f461e5f6ec8115286bddf21d4182c48cdba98eb7f041ba58c43bb712138d795b475f5ca2887cf58e88dbd048d5cdd39da7ca31bc4972f679e3fa4e1701d73dc0448be5da01dc9c951c07a10732afcbe241553990f3559ecf2c5e6fd31933e649816d56d4ba05eb905c1ab47675f0935fdc4a8cd71c8f40e1fc96c5f959bb2106c65fa9b0feabaff095e97d7d16f6d2a910fe5d91091abcdf1ce4425da0fdb241e31ba071a048eb42202031afee21272586f3c4fff75622700e41e11f9d086e3fc2425e89f8a275aa7194cf3844adb31d254a31e0382ff9b7f7c09d2bd11d45cd73d5dac40cea2f48a66b35c5270cba74e0d6da981944c29608fbc126d7b2337f3094d7daa2e7f72e39779e67997398c081676baa7c94ddce06a0f6b0374cd26c1eb9e0c7e7983fa310cc7de82ba46b4a2ad84cda72a8cfea26ed392d1d0e9565a7a9298d345681b75c2fffaf84a4cd933338ed6819942b232a08670834632627f9f2e27f9a181e0b5c281118e55cafb835cd352738090164c252135a6cb117754c679dae2527b8295d7f34c32f1a710cc7943da2ea9150d706f8abf5251082ac6560de7531177872c1925c010860c4ee302be5a9d057c64637936f52228e938cb1b0ad937d78c2161c19aa545e106e845f33852a7aa298b7ea164cf0111ede43950473c678f9c16aa61d163dd678d2be6eccf319cb250a97262083dd87b4d41f8dbfa614ebb27e98665daa39fcd1eb806342ebd97782f25587a02a44d166b920eb0b2a5d1b81fe4cef66bca01940fd0f13feb8e6c28d7756aa1b1e0c2972e74b22689fd6cd6ade5ba02e429bf82f3d4016f4fce0be9ec402b1ad1a26e343e9b205193fc9e92ebc86f11c15b88b08e001c188aae2c15470d237133a24a65eb7f717927fbda43d979a30a2aaf928404ebf4f7e23e7112b91ac239b9636aa5cdac588ad7e3f8f87367cdea80feea4e102c4019ef1d1dadfd6a4c121756544eeba564b86f0afafcbf82260fc09e542c5de6fd73e97ca12ce6abeace213040f7f1724d408f483d61aa32ea1578353e6e3b7ef41e2a58cd125c8ee4ee86ac73b88bab5da1f3ea362b6773ab757d061febeea5b0342afad7b0e227cea577d37426b11adc2c1cce48bfd2d63ea46d86ef28483de6b2cfb528d1549f60d7c928dcd6f0e70e4feb2c5c0f1d61dc1dfd04518d3f7d8220cf0b91b8000d74771451a4e3bae7dd4eecfafd8b5cd0d8a4014b39a7c046b2960c3bc5eb6fcc337e7dc5d055d750ebbb240928b00f781aeb4fb65d911a8e2cf646cf2566417be7769cfc7f7bda5f668690b583d92d2fdcc134b1aeb67f01e0e661587c3aaaa507545b04451db08fcc6e41e9bf9f8db22ccd24a5") setns(r0, 0x10000000) 16:42:41 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xc, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x25, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:41 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2152.975546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13726 comm=syz-executor.4 [ 2152.985924] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2152.988955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13722 comm=syz-executor.7 [ 2152.995926] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2152.997996] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2153.016156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13731 comm=syz-executor.4 [ 2153.030347] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2153.038293] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2153.039953] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:42:42 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0x7ffffffff000) 16:42:42 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xd, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:42 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xd, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xc, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x30, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2153.173089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=13743 comm=syz-executor.7 [ 2153.187430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13744 comm=syz-executor.4 16:42:42 executing program 2: fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='$&(!\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/pnp', 0x22902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, 0x0, 0xfdef) [ 2153.209740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13748 comm=syz-executor.4 16:42:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xe, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:56 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xe, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:42:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xd, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x52, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, 0x0, 0xfdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 16:42:56 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) sendfile(r1, r2, &(0x7f0000000080)=0x8, 0x80000000) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r3 = pidfd_getfd(r0, r0, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESOCT], 0xfdef) [ 2167.712016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=13763 comm=syz-executor.4 [ 2167.715506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13770 comm=syz-executor.7 [ 2167.741256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=13778 comm=syz-executor.4 16:42:56 executing program 1: write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) fsmount(0xffffffffffffffff, 0x1, 0x8) 16:42:56 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x43) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x0, 0x0) close(r0) write$bt_hci(r0, 0x0, 0xfdef) pipe(&(0x7f0000000080)) 16:42:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xf, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xf, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x53, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xe, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2167.890839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13787 comm=syz-executor.7 [ 2167.894262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13789 comm=syz-executor.4 [ 2167.904954] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2167.915063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13794 comm=syz-executor.4 [ 2167.918084] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2167.920071] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:42:56 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8, 0x8}}, './file0\x00'}) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$dupfd(r2, 0x406, r3) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, &(0x7f0000000000)={0x1, @read_local_ext_features={{0x1004, 0x1}, {0xc3}}}, 0x5) [ 2167.950153] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2167.959056] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2167.960649] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:42:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:42:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xf, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2168.090074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13807 comm=syz-executor.4 [ 2168.111248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=13808 comm=syz-executor.4 16:43:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:43:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa6, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2184.643514] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:43:13 executing program 2: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000000c0)=0x7) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, 0x0, 0xfdef) 16:43:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/xz_dec', 0x22902, 0x20) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000000c0)=""/165) 16:43:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x11, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2184.654803] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2184.658132] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2184.668150] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:43:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x12, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/wakeup', 0x40000, 0x9) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) [ 2184.737943] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2184.758476] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2184.763310] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:43:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000000c0)) copy_file_range(0xffffffffffffffff, &(0x7f0000000000)=0x6, r1, &(0x7f0000000040)=0x6, 0x3, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:43:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3cb, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x25, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x13, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2184.842999] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2184.864156] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2184.877456] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:43:29 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:43:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:43:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x25, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:29 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop4', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:43:29 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2f, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3d2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2200.992446] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2201.006074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13877 comm=syz-executor.4 [ 2201.032061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13880 comm=syz-executor.4 16:43:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x400, 0x48) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:43:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x15, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2f, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2201.114302] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2201.124851] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2201.126414] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2201.150728] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:43:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x53, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2201.163804] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2201.165140] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2201.176955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=13891 comm=syz-executor.7 16:43:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/nvmem', 0x4e8902, 0x30) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r1, r0, &(0x7f0000000000)=0x10001, 0x10001) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2201.220021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=13895 comm=syz-executor.4 16:43:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x16, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x53, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2201.280799] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2201.286405] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2201.287836] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2201.307152] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2201.315853] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2201.317058] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2201.351939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=13907 comm=syz-executor.7 16:43:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x73, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:43:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:43:47 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x16bf02, 0x0) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c4, 0x1a, 0x400, 0x70bd28, 0x25dfdbfd, {0x12}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x1f, 0x0, 0x0, @pid}]}, @typed={0x8, 0x8e, 0x0, 0x0, @pid}, @nested={0x41, 0x90, 0x0, 0x1, [@typed={0x5, 0x29, 0x0, 0x0, @str='\x00'}, @generic="29c929a49914acec41505520107cfef247", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x15, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@private1}]}, @generic="7260ca221db0c9678f934e88e31204c36e14394c3b7dca2077d1701379b13b505bb15c8d7fa44b027a075162fd6882886a7699e03d9e928f25a27ad7502c2824b0c24f", @nested={0xd4, 0x80, 0x0, 0x1, [@generic="3cd153f20247c2a182a882", @generic="467165d5bcc52b7034e0e15e7c0ba941c858fdcb9ae1f61c72b0807c0b5ac4243131aa4d84fe9862394cd956536585618d098441553eafa2b7542c464a2377d7ff5c298b2f3efd4f757f689b37dee74ced5d54bad7a8d4f9ed333532607c53c6ae447fbd063acad35a302e242339ba982887a1ec572861ee6b7c2c6594b121bffbc1da687ab88cc7999c000f62af630be4e93f4775a2ba7a31820b871d62bed84089b47fbc28445eff41c0618454ce8c1c34ad51a1ee9e92f06f109a7464b8012f44f69ee1"]}, @generic="080684086c7472d6c596ba56eaadc9e487820d5513e75f50841876bd3a56b477bee6ba51d15c5d363094cf965f7e4d787ef42ce66466753c4c2edd72f000cc50df250a01c69699f11720a57819926952b06fbe8653e8e70e5e07d468b9c7cf96bc2af9b8345c8681bc8faff9bfb395428ffb07d83d65a50821b067cd", @generic="af2835f15478bdb6c4c49ce2f32a676deec8ea863c11ea28c246fef18974edd0c56617256b9f836cd620b8c0648bba92c519026539723fa18034abf9973bc4951b757bb89882f5616b0f0596d6cd4d9fc5f810b671d5fc1f02fef652a0658f99f6754d08ee83a452b37da961c2580aec8211b6a5644b8b0e7cc15c9ec7816479bc8807e38a16ac4ad0747babdf0d977979334f6328f9f0c583e109853491818e5b8836ebe0ffe946318d2943", @generic="3e5a6aee8b47648d72a1a8915ef1b30f47b4081142b4"]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:43:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2218.245483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13921 comm=syz-executor.7 [ 2218.251999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13917 comm=syz-executor.4 [ 2218.256987] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2218.263528] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2218.265919] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:43:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x17, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x73, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000057080)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "30c0a121b4e6cf"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000058080)={{0x0, 0x1, 0x4, 0x2, 0x9, 0xfffffffffffffeff, 0x5ab, 0x0, 0xffff2c18, 0x2, 0x4, 0x5, 0x3, 0x4, 0x7}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000058140)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000058340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000058540)={0x0, 0x0, "184e4c1a57d5b43fd68b185edf91ae45537648db32bd2763c54b53d775180f8dbf4feaaaaa159aae97b94128473c11685164e03593cba0d57ab76ec57c821bff02396860ce34d69a03e2ee90611ce9cefae5623208cdff0691e8e57a0ca9d085c873976657f7d1996bdd8192f0fff3ef147eddbfc0e908ce014b4bcade507909d1028ead2f660ec5543239d08766e6a406b4455c5f65950f143aa34b216c24b316c638f93c0978f681dbdbd115993894f50a93533fc423eaf08451a3ec0756cf613b0bce58b9a47710e36d7a3fb469f5d78252f2a0ca16b6933d3c9ee6f11c9170fad40c8dfb0454c0029df155fd1e8f3789886554452a075509b98f071f0147", "ffb4da526f2ef005501822c419e388051c5d7d5b8ac20171ca56b10f0b7757f0149265ae9c10ad7c41e85e08351370ab3db357b17487cc4a63ebc95def612d61e9548771f43211f7cf6820b482b77fb24cb140e6e15bee760702915325e5bbf5e06848656ed7c94a299c5b8648b90daf817b7eb5d71ef480694a7957c1be29e5b851aabb4e5a175f27d64d63162912ea99d1c293dde2582856aa6f8664446ecb697af0fc480d4779f1b38bb8722b5c67713931a2539702fa5b100d57cb15957f776181a510e8b2cddccd1a2cd4b836637a59add8c0731247c4b0fc14523f3f2d7292d59a1791d60500546f2991a6a1c3ba808467e0297c5fb8665d2c379349c4f9eaba69f050c20ebfe9f68affce2de08e6734c8fd02bb60634b3b4f895e246d5d49c4c7ac3a710ed9a22c1fa821847df663f587e3db54b0556310d34bbafaa738d098772bfc27f3b7cc8974dfa1c62151475baaf7aeb048827a41dbcdd0039a09216680bd6d734d5599b0d6a79c2d96289e8fac2aba2aa0c041abe94597a3b75a97152d4d915f1dc8a65ce1a8269f5e7983f17f3605c9dddbaaf24d654f9172b9cea85d97bfd1e88a72943d804aa6a0d3377af78e31f2c2869b831081e6c3c3be690aca0e311994ea5a03fc6c4af2553f616a4fa75b347cab2d4724fdd747e493e067732df2ade3cf2a97a11b06849c8cd727e4af513421276d79224058df9a00c3f87ae8bc054e74519ff22141279c03bd0ea45975a165fac640c5ec3ad9fc39480babd8e170369f18b531260cb1170d285f7a5be9770ff4cabebe90a2f6910bf1674a48e679460553829f0bd5435ffb7efba0cd35b6b6fbd6ced17b68c1c6d52b9acbd8e8b30060a43e5abe56d520f7877cf042bede3da307a9bc4dfe8d42288d4c2bbcd8366c891e4ae0fcb543e16bb14889b419dbc20891044b42d68788b201f4e6b247fd9846fc5e7404e501de24fab48ab98535d8eb1bc6ba223b3f87081c9ce9ce577b1c5ee121ccc98f95443e3d1ee2e802b283de63b2c5bb952faaa6ea1cb9aabebb5b52f9905d4d10c1e1b656744455851b038e3fb0fce589d1ed167dd470f1f6cb26d4b226ec4e9dbf50d431654c12eab6605e82a96a07b7c09ffe84621f8d0b427e3215f3147e239e5355e721cb1feb2934e79c2d0770663923a9e2c3770c31ee786463f450643166b0118f584773c44531ad627fb93354993c4ab6e7ecf08f4375a0f161cd9fa949502d09f398ce9448174b9bf3c8b9e3c33369bb4e292bb4cdb7e0d02651ded27c83a51d14300710888ccf99f2969bf65d7bb103297386dc0d928f9206e3ed08f7d9d00eabec94638f7f1388d72c45077f0bff8a7a72f72cd28b729cf16d5650d1672598c8c7a3f9f83c5e0acb67636d47f0db536a6b7348207a293b455aeb5af4a82e986a53bf749c97054446f6addf837baf5eb40b03266ea575227c31468b2aa525917462a1e4b951c258c3a7d211607db9dffc737e2b7fa0bb627f15b5fa0c000169d4097bc187eeab7a39f1ebc5073234bc5a4ebecccef95f7f3d480df502c6fbd1c772c8405315e5de8534a843cc66730a0a41037912ba834c54a1fa5bf19df9585b416192f43d3ce0b74e0879a6829939b5cb7a3ecae82f00cc1ad46afad15bc835aa12a2c4c1829f8eb6f4d46387750d685d1780578edf5239fd6bde5659faada4f6a93c9209695d63824bafcecd046ad983d44863f02351e396831b2777927c7bbd30d66a76921b583f6be492faf572c385a0da65815aa8eac71da64eb2a224dd1e854e0b280b2d86883173e3a7aa237e1d9abc0ce39364b84adbafbda87564e96d9039ff59c03cdd9f6c861233c2c27a43b91d001832e4258d3768559ebad8c1e47630ae5d046d273aabe4a5b3eb1e227fc8361ddae73bd88702ada6be88a800b0d4d9cf5d380f7b23d2dfe31944cf42b968936728c80bcad3d26794a197d8561c2cb9d9713c2cb75c59bbfaf0225c77e84ca41027532ff43571a6ccfb69ba04d4b7a373b2845c073d800e8da4b41e4041dc011a292577eff3e85a847516cd54dc215cb204f05f0c6c52051aa10fe19a9485ecb132facb2b022c94fffcd6f702a7181d5faf8c171a9c7a464e9132e1a5a671fe8e4a46b86d3711e767381709a3cb962966351b4c3e86be7a2200b6cb9764fa93e19aba12117491284cb3b5550f13802a3c206b6a91fe525bbbbd32efd6e09963c472f5b2a933ef3eee38cb8a891d3db1595e22fe4b88fa7e5831f22444352d96aad8994ac81295a08dd44b5571e1f364cd221e2e3185668528551c3cb304d7437e457fb541c2aefc8508aab832e39e22e429818bb39ce532e54e80934cd448ab5a95d3bc426c5766bcfb5af766f2aad493bba18c21e0fa79d801b7c409c3a1869cd231c2a5153282d589767b91088230170007abac9737b5c1f87f210f585534173650450006c744a214fa6a22fb26792aee13b11a337bd21799358cc37ce5e2058faf5831ef077518aa5a688cb84935c011ead46f610c756edc468066ba4cedb74587544aa96415d41cae5ac141a08d9c4bf81e945c2360f5511d8ed9e45be31a5f724e01141979d24e39aead07b604d9568e4ef115188238e3aa8f0f2af8a333b3070cc5682f4930fa55d043c98438bfb6061fd2f986784737f7ca720b9e00486087d7780d35242d9eba06aa443dd69c3f815c55ae48c13047ca24fcec019f3a170da619ea053bd19f274278c304f7085f03faf7ed51fc19a71a7c762e29c7ae7af77913238ea13761a9b874dd9c71e3d5e2ace577f5159b1958b835fa9ce958df0bd17f7effcb5658d1d53d3b122fa5536208a25ac2c234c57172536fa037a07d1d08e78bda48cd80543a617a2059958aecb796b1fe9519ccc99aa968b9645ee588d9c858bc91ea85aa9a5c8817fef1a8a593c19caf7fb6e4fe48ef472d52c096172320c0f1235ccc492036f102ba92a6778ceb7b5b670b052fdf551e05454f1f0ffb8603fc7fbb50ed4e5aa6535ed84e00459283e3524ae6c6ed343e5d65d279c817946322d22bfd8d07ddf335da20b3cb18d5ca69f0e1608e90e644a7024892f12b9045ec36fafbd254423a9e5afd5c15592f13685d6cc4c46b77a559afcfa1a9cb0d8c8dded065fd8b5e6a93f7e9cda829ff7aa8b7f7549e5cbd4c211bb6628a246e94747b1e45d28b9cd31c8113da6bbf6e64b1e41ad7ec1daa86e66dc47810a574f9c07fbe8ebcd765fd4333f2420a3fe8e205b34985455dfd0200bd2cc64d91cdc834d41e90485aa32c98d06466913571ff0e7d8969a7b9f3b1bd2e3442eda59a89e15294b04e214315c15840d34831579c9308bc91590c9d1bd4084942ffa97cf3f07311656dbb979e54c55639f47f5d93786b5c01d05408a6930ba460a34aeff798b76ff840872ed4cbf9b1cb985c74b7c41824498c66eb38d6503a9202cd2cee443b3e1b0e3b989d488058d6e1e240a8c82519a58ae27e3addd10e0569dbc15f5d9958c2940835fbde1865d5c17cc59305d516c82f7096fc6adb5771a52136359ed655b15a48a1fb22bd5b38bfdfd2b756a4c2e86acf779d725699218084aa739f8284411965e0af7defccc8730792c5f6d927d80b33058ec4f2adeabc1e6277833c14f23eba3b9a73e4920f733208c3ded0ed77487e543f16f1b0703810b370cb65d65b3fe4f405e06282974b90005d4b15170523a290e44d61d55edb2fbd31e5608910ccba87bd75699335fa955b7a880a40dbff16245002b3abde13bdd8192463f1069c2cdc1fa585b349f464e79e774f9c6d402fcf5c278b90c9efb81d65db20e56d6ac257eef369f7b11fee4887564f406efa645a9de297a068d268e63d28837607f3e588d298b5200f4afc5fa5b1a87f1eb0c8469261b1922eed56e0e86631d2a3cf0c63ccd68b8f23897aec9f258037e342418c48fd6b504c645024bfed509f953cac0915f870b2af7ab09812d10c4648ac900b3a5e4d917693809420a4c63e2463699d9985aebf5613bb980b2f7b91b24ffc065cb62a461d33e2c77c3efc16c002e45171c129cb1b2fa6756554e53cc379ea6bdb72a5db923dbf89c0dd09a4d3dc889fd4173fa4df9dc412c2e42ee6cf6ec9bd887ba230e0c7c85e8f4ea79a8935a243bc21661a3c1485bce697aecd98bf8fde994dd9c8a1ef8feec8f00b00ea8f844590b4675fd8fa4655b06e97b23e7907de2cf63cacf65b9be139fb68b4ad2a9102ae6338d195e82ffb5fa98485475bfc8b1cdd3d16c45939f3f85d21a0c0a6de9d128b137c2a8a610ea4008a7a5e0abb453a1d111e91f0b66930db649b461fdaded4c95642322fa5f8ede407f62a77bbe6e6e707751c8a3c0ff6ac29cfda51e28ce953c42253f359149af6bb8f6d95fa660874dd1f647849f137e1852cebfbf1f7291a116306fd05991d2101e580907a82c4c75a4b4ca0d91a15e7d92656285a99e8ca3f6d4e9acf857f9904e2b007e21763c6c52960fdff3c96fff9212589aa63316c0db1a313cf8b3c603c1ee2078ae259add1d7524dc7f5874c6d090d7db495befcd0711331efec39de0711238d1f6892f28ac53a08b8773a11f7a87ef901c553958972a78cb6156a433b43b4c44ee105620f17e452c04920c29a8a2273371b30a191860a2941d86b47f98fe1f0753bc49e1cdc6be3a8c6e9c5e6f7e42161a938a414c23d80393ebf801cd395aa7978c16c6abf149a16e221705b0ee90f008e7f9c0816c018eae1c19e2b487fa39874ed9ae5f20fa9d3427acbc85e5e7af8c73c940301a9df64e917b719686e2d8739f5946b5ec85622c5876ec096222c9a907b347a0ac5fd38eceb212e22d3e73494f8355cb601cf2ef02a46d829451aa57b9c12861c3c1c960a6b1191ac71218f07195cb32ae585da4cca3976fd21c758fba48378ec06f8c22c4a6c883183f7e8900763d862aed3bbafca4383dbedac2cf480d2966a62ff1b7b5c68f7c61747b68a40f6c569396fea466411dec47957080a026c7c4b2b690fa6e0ce90334ab252d1690a6a3376991709c87648e41e663606f02bfdf5d7b138583481772471ecff8ea075500b1dd86173392834cafd27ac28dbf93dffa74496758ca5f6a269e59a1c6cbcb2cc70f90be23ee33eecef5e40aa000017107d70b778420446276819c032e44db295f25f4894c57b535f88490b5c034bd79e8d6d4f0fa98e64eb0edd13807782aa9695010c2e9815f00973b5731de7bd58afa95ae3c8e6e5d545be4080aeef7a31ea94860dcdecf03d7ca76218b9222bc0ba27eb1ef76dcb1ef68d9c4a1cc3ffcec58cdf13d7142393df59dd91d15a47d126fd7e583a49ce2533e2cfc390bb45fcf768623bb17b558a1d50c2abe7f64ea7697c09fb27a6a130c0cb043961b8d443ce98f35f96f24ed89db1"}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r14 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0}) [ 2218.280519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13928 comm=syz-executor.4 ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r14, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [{}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000059740)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {0x0, r4}, {r5, r9}, {r10}, {0x0, r11}, {0x0, r12}, {r15, r17}], 0x8, "cd16e6e8f2d4b2"}) write$bt_hci(r0, 0x0, 0xfdef) [ 2218.301461] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2218.318911] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2218.320654] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:43:47 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_getres(0x1, &(0x7f0000000100)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r3, 0x2, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r2, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000900)="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", 0x401}]) io_getevents(r3, 0xff, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)={0x0, 0x989680}) timer_settime(0x0, 0x0, &(0x7f0000000040)={{r0, r1+60000000}}, &(0x7f00000000c0)) [ 2218.407327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=13939 comm=syz-executor.7 sendmmsg$inet6(r2, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)="1b08b5a911eda970cf6e19848a12854ec6ec327a86a69b93093cc6f267b89d8f511f0efebbf8992191c904f4728a30901dc850a92393bdd4b86a6c5c35ae3c5e4d1d03374dcbd75da82980e2958a3d2ad54e6dc2bec8b0b3c639cb036b9f3a44c6badd5126211d77bed8e47b1f2b78d2f927087d0daa35963104550956d2621ef57e30875b6275ed18a90141aa631e0765865056e7ae3491d7d77c6277acc094f402fd7e33aa197a7d9290eecd99258bd8d48fd22baa42d4c4d0d9578a511d39b6b887de597812ee74b60811cf5284b0e41972549c4b419f42d778c9ad41a5135ca344ddc8d92962f65b406fd74c2cdc6999ec", 0xf3}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000340)="83fe62f5ed283d9b9abb8294832f23cd7fbe57083d18ff194146c61883117cb0d90c8ff3b16429c9952deba9e385bc05b8a31199ea8eb2372394f988aafd73d6f545721ba952fe36e94965da6f72c75de98d41b6cb0f0415e1f593e2823e4965aa867bbaab53c017f32a6f5861", 0x6d}, {&(0x7f0000000400)="c639e2112ccc7bb65f769de2131a4116ae2629187c0e36b5eb04800314df94a7cf6f05b392c876b19b6b5cd75ac0f8a9a0df4aa2f7255ff13655ba16b297d85d9e5aa40f207040b919b43c24057e06096d9e1d3ffaecf44721d1b48b468ecbb5b5ac664ad75324744fc6960ffe67b56475242a3d2f78a84a1d09923402cdcc065bc3b56decbcc9919c08ccffa2671adcbecfba6e7010da211f2af312a9c468eca9bb8f00d380b82960daad7ff57aaf46d0e3ed0b0b23ecf733464aa9ff658fa424ef67c278c37bcfb1221601933be6", 0xcf}, {&(0x7f0000000500)="694cbe538530c717dfdc088ab3f1e48c30602aadabed0f9fee120c1ec20629353c44ac3e2d3256865a7a628d2d67d96273c11470ceb69260874a02f695d1960e6654d18b8533796b27aef74b1761f1090d1945b451083f4be4cee1d87de6abde3b5d593ec772d6964245608e9c7a3f7d81c7e2929448a9083f633e2d7872e22d5d3dd212b7110c30e396494b9ba1c7cdd87dba355b5186018ca461c904028c9999d4780d06d37ab2814306d727c5b02e9758307b6803c3f3408f0a645f340a1c9b3ec6a7ce4bc3021e1f370bff6583d23984f485a04735469162ef97", 0xdc}, {&(0x7f0000001d40)="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", 0x1000}, {&(0x7f00000001c0)="63b7472d04c54f9724ef37820ef447343c2530a1d8ffac634362f522b8eb5140425901f6e9657077ec88b2a67c31bbdafab764143608632de88edc6bbe7e", 0x3e}, {&(0x7f0000000600)="4bac17a9723ccc3977e66218e6ea4ef8228028b077c7c545df46bbc02c0c922d3f68deaaf55b07d5e1f576e6d79c2b8949f1204744f61fc652fa0a020e82", 0x3e}, {&(0x7f0000000640)="f45f5ab71c5f1c7a76dbb2642969da0fb44e4f9445657c4a731a1b0ce81f096d5cda9558926579f3fd31c65f37fd3324853f79eea98609d0a7607969b350a95baeff5dd52fef7ed0bdf3", 0x4a}], 0x9}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0x4, @mcast2, 0x1ff}, 0x1c, &(0x7f00000008c0)=[{&(0x7f00000007c0)="44449cf7eac89ede0f39be9428f7d3cd8c50a1a10d", 0x15}, {&(0x7f0000000800)="370e83b890c18c80587417eb1727b2ff48b35fb4bae14609a08402532a6d4f1edd4fc952288e6d9e67bab78b7cef03fc24613c8ad716228fc17f71ae94bceaea590bc690adcfda58e05143a67669f83be3a53a50fe9883692dd22c3aa9af94904dc771d0c9a2853389817f6c4519c926c20da04e0a1b7a574c7555b9d75b84bfde749b39aff2c2e66a041ecc9d34e4b344278546825f8e022ab51dac156444a17c669326b53bfcdaf50118766df46bcdfdb71ea7c308681941be7a2d3a8e", 0xbe}], 0x2}}, {{&(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002d80)="fb9112fd6530ff39b52aceeaad4e7a7724ca4487e992949eb17f0ed7638adafb5aabaf7cb38ea2802d5f214901cba6a0d261c392739cadf928966b2809da3ceafb6b40ceacdd90f81e8aa62438eec08ab32b410afb", 0x55}, {&(0x7f0000002e00)="1db7e18902f8a3b41edaf7b655c84910fa405d6866e90548ee916652679772a955d33b6098c7bba85bf32bd23e154e30a7", 0x31}, {&(0x7f0000002e40)="3b2ff1e3d1b57d6949d07506c8957fa43858975a0b7fc40389b47b9267e0fe1cd1ea92357e764289d2411320aa75466fdd4b119323fef13e2fb8be2cc77a10173593ffb33cc4fc8f449d7d0042ba3bbdd8a37986", 0x54}, {&(0x7f0000002ec0)="95c99c1f0f3efa36356005d6baada7f3799335b291f027939a955534195c56fb2f86b28f68b68fcbe51b428df5300a45614cf97665b5009ee805b9379a8192271e1c4124f918a47c3f9dc3c1d82f7e30eef6a1382989fd0681c26a7ef6492e10c2ef48cb9c77", 0x66}], 0x4, &(0x7f0000002f80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x1f}}], 0x30}}], 0x3, 0x90) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0xfdef) 16:43:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:43:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2218.446274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=13948 comm=syz-executor.4 [ 2218.462213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=13950 comm=syz-executor.4 16:43:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x19, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2218.487173] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2218.501926] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2218.503860] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:43:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, 0x0, 0xfdef) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) flistxattr(r2, &(0x7f0000000000)=""/89, 0x59) 16:43:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2218.534243] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2218.545890] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2218.547532] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:02 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pci_express', 0x22903, 0x1) write$bt_hci(r0, 0x0, 0xfdef) 16:44:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:02 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1a, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) copy_file_range(r1, &(0x7f00000001c0)=0x34, r2, &(0x7f0000000240)=0x70, 0x4, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r5 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) pread64(r5, &(0x7f0000000140)=""/78, 0x4e, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) sendfile(r4, r6, &(0x7f0000000040)=0x10001, 0x5) write$bt_hci(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="34d653dab28a7c318a8abdb44b5b8cc202a42790bda69a6580b88f0c9237bfe33c57e6b19ab82e6e1fb5b85dbe3c7a019b0505d8b028d165596849a9dc47b7cd2e515ab39ff6df3244f8af2b68e50aee8304c83578a6f10084cc3064fc7fff4c3f9e92ab55f570a4a8833f64c52d8db8f26f70ee7c828a64bbf4c50e2bfd3a2862cac6405302a9c7defe269f6637335e14194e9d1a73eef6f93c117ab6bff97ba02a6c0166b61bcae75dd63537a837bf6332538db0d34495127d44025f14123b9721e7c673874f490d764ac7f4d8bc980eba18b692b8dfc89e3817b9f36c0aad9242c8ae2f50f5c76d71c1d910651a32505c8676159de73ca89b74956ba34b584cf39333d682e5b565a87da15f5f2b17a94c5c6031a7005cb2612ae4033caa79ca75377fa4300f00ae39af00e97b5c8ee4a87e41ea20bd6b48029715d55be831e86a025ee07a674ddaca292101c5274e79434916f54b5ca9bc6dd91f00969bdd0aa859f9074eded49d0b1d5b54e6f51bdf67f7026beb7dbafd48dabc1cd065af6f0c3087c711e2dcc2"], 0xfdef) 16:44:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2233.299968] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2233.312910] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2233.314822] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:02 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1) write$bt_hci(r0, 0x0, 0xfdef) [ 2233.333340] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2233.350944] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2233.369334] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:02 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/netconsole', 0x4001, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x303) write$bt_hci(r0, 0x0, 0xfdef) 16:44:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1b, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:02 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x4, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2233.449433] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2233.458210] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2233.467920] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:02 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x43) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xhci_hcd', 0x18842, 0x24) [ 2233.476426] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2233.482238] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2233.483297] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2233.495088] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2233.502583] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2233.503505] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2233.524915] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2233.526908] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2233.528600] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:02 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x8a280, 0x18) write$bt_hci(r0, 0x0, 0xfdef) 16:44:17 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:17 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x4, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x5, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/workqueue', 0x800, 0x24) write$bt_hci(r0, 0x0, 0xfdef) close(r0) [ 2248.117478] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:44:17 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/41, 0x29}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/135, 0x87}], 0x5, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x22) stat(&(0x7f0000000000)='./mnt\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000000000)='./mnt\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) r4 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0902638022025944aca766a1a8bf672b277d305e2b1b752a1c4aee88f76fb977125acb8e73a0f24c85c11d18b8e43a65550ee18582cbce75c6cf7b69b1614972e38d9be48546454da193e0fd99479929412b2ddea2117f1a60b0723e2b7c385cb3feec12d13f5f6c3c7dcd127e44c83605f2f00a60e0dfdb094479b1a1bd4c7aeabe750eac90b82cbd72c90ebdc84a600a2a6a887fe2cbdcedd861a5a0f6bc64c1e270c7e3947e21da8279324965c608006c00", @ANYRES32=r3, @ANYBLOB="14007700fe88000000000000000000000000010108008400e00000029f1934e989aa19ca1e0626183a794082565b954bd7129eea04fc53e39483ed1f434c9436e667aff7e958ab3b87ea29d17a40e23f0439e5f5b57f202241cde0adbed29280ba3ac07c0c253618f48501f08ef85dcce7c7ec0eea9cd1b2d811ebb9044c8f777ded1345fdc83e2790f548e33191e108001b00", @ANYRES32=r4, @ANYBLOB="f184d46200ef5f5d2a9b28c650278a219816213739faf8712c08fb5912a741e7c2390c78cd3c9df7c11a59341dc8587da3a2ef97bf09215c4d20f4546325aca24db85267e4398fd25d8d1d8b595804d783d3eb8660d768a3bd8da2b2eeb6cf65cb6d9803a7210dae904df13becc6768c62e14a06d08dedb014c544c12399168b55ef7f3be7e97fc510e5ff4f3c65313cfc2e8ab97b5773d7dba7afe39b190664b5b49736a003158290d3526e9d10cd774dd81f60a60000000000"], 0x73c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000010) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x21a8c2, 0x0) write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0xfdef) r6 = socket$packet(0x11, 0x2, 0x300) copy_file_range(r5, 0x0, r6, &(0x7f0000000000)=0x5, 0xe792, 0x0) [ 2248.134329] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2248.136485] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2248.141991] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2248.154095] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:44:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x5, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2248.164151] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:17 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sr_mod', 0x4a2982, 0x2c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) getpeername$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2248.176338] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2248.177753] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2248.178829] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:17 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x2a902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, 0x0, 0xfdef) [ 2248.230122] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:44:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2248.259071] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:44:17 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x8, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2248.288091] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2248.295845] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2248.297992] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2248.299159] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2248.310523] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2248.320963] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2248.322003] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:17 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1e, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:17 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x101000, 0x188) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) copy_file_range(r1, &(0x7f0000000040)=0xfffffffffffffffa, r2, &(0x7f00000000c0)=0x5, 0x201, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:44:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x8, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) dup3(r1, r0, 0x80000) write$bt_hci(r0, 0x0, 0xfdef) 16:44:32 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:32 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:32 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x21, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2263.335431] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2263.366868] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2263.369209] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2263.370857] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:32 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x22, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2263.419449] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:44:32 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48401}, 0xc5) close(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, 0x0, 0xfdef) [ 2263.433910] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2263.435527] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2263.439173] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 16:44:32 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000200)={[0x3b6]}, 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000091}, 0x20000800) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x5, 0x7, 0x80, 0x8, 0x0, 0xffffffffffffffb5, 0x84088, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3e140b61, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x40, 0x0, 0x3ff, 0x2, 0xffffffff, 0x400000, 0x9, 0x0, 0x8a17, 0x0, 0x1}, r1, 0xa, r2, 0x8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/pps', 0x88000, 0x21) copy_file_range(r3, &(0x7f0000000040)=0x80000000, r0, &(0x7f00000000c0)=0x3f, 0x3f, 0x0) [ 2263.455493] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2263.478873] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2263.487953] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:32 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x23, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2263.538999] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2263.552279] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2263.560080] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2263.566045] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2263.575918] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2263.578439] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2263.581059] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:47 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cryptomgr', 0x2000, 0x84) write$bt_hci(r0, 0x0, 0xfdef) 16:44:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:44:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x25, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:47 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/cfg80211', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:44:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x25, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2278.856384] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2278.870940] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2278.872579] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2278.876331] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2278.879844] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2278.883001] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2278.887355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2278.890062] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:44:47 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/backlight', 0x22902, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) close_range(r1, r2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4110, 0x100e}, {&(0x7f0000000140)=""/192, 0xc0}], 0x2) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0xfdef) [ 2278.898463] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2278.912021] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:47 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x20, @none}}}, 0xb) 16:44:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x25, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x30, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:44:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2279.046180] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. 16:44:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x30, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2279.070960] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:44:48 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2279.092397] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2279.094384] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:44:48 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x173) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2279.130240] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2279.139209] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2279.140817] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:05 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/snd_pcm', 0x2a942, 0x189) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0xfdef) 16:45:05 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x53, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:05 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x26, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:05 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = fsmount(r0, 0x0, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x10000, 0x800) r3 = syz_io_uring_setup(0x1d89, &(0x7f0000000100)={0x0, 0xc21c, 0x0, 0x1, 0x26a, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) copy_file_range(r3, &(0x7f0000000000)=0x1c6edbe9, r2, &(0x7f0000000040)=0x4, 0x23f01c1e, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:45:05 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x53, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:05 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:05 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2296.978403] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2296.991377] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2296.993174] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2296.997281] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2297.000880] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2297.012226] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2297.020502] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2297.024176] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2297.027544] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2297.032983] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2297.039161] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2297.047902] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2297.049447] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:06 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xbab4, @local, 0xe4}, 0x1c) [ 2297.064717] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2297.080690] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:45:06 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, 0x0, 0xfdef) [ 2297.087909] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:06 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x27, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:06 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:06 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa6, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:06 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x60, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2297.182037] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 16:45:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa6, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:06 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fcntl$setsig(r1, 0xa, 0x1) write$bt_hci(r0, 0x0, 0xfdef) 16:45:06 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x80000) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ftruncate(r0, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2297.241236] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:45:06 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2297.269200] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2297.271444] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2297.314391] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2297.323396] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2297.325115] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:23 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3ca, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:23 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) accept4$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0x1c, 0x80000) 16:45:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3ca, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = accept$inet(r0, 0x0, &(0x7f0000000000)) dup2(0xffffffffffffffff, r1) write$bt_hci(r0, 0x0, 0xfdef) 16:45:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x68, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x29, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2314.260520] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2314.282460] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2314.284230] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2314.288340] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2314.317484] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2314.329035] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2314.330534] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:23 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/mac80211_hwsim', 0x22902, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$CDROMRESET(r1, 0x5312) write$bt_hci(r0, 0x0, 0xfdef) 16:45:23 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:45:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3d2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3d2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2a, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2314.450447] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2314.473938] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:45:23 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_seq', 0x800, 0x26) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x414100, 0x0) pread64(r0, &(0x7f0000000040), 0x0, 0x5) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x7f, 0x64cdbb06, 0x2, 0x3f, 0x8, [{0x401, 0xfffffffffffffff7, 0x8, '\x00', 0x84}, {0x7, 0x9, 0x9, '\x00', 0x3200}, {0x3c3d97a5, 0x4, 0x4d93, '\x00', 0x2800}, {0x5, 0x4}, {0x101, 0x2, 0x6b, '\x00', 0x2c84}, {0x9, 0x2, 0x80000000, '\x00', 0x202}, {0x5, 0x3, 0xffffffffffffffcd, '\x00', 0x3006}, {0x2, 0x0, 0x10000, '\x00', 0x8c}]}) [ 2314.492294] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2314.493922] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2314.530126] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2314.531907] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2314.533211] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:38 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:38 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2b, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f00000000c0)="f449ae583791c38b065cb51d1a59535c634153895545bdc212c356d9b36ee13d35c1e0e50db945d0a5cde78ca8382e367d0fe2f2988b9c5b59d284daf733b0b317e5c6498b21a4c65eaa7e4e3f9f52d63d7ea52c12ef6124fc4c213e2b6ad2efa89a4d85087922fdc63326d42682cfe817419544eaa4c07e06bc4760cab6e5dfd147a8241c8f9118a8d55f42a9641d114a384f195ab4b3e0837fd81a05c5b193e9663ba7ed7fa68900f4f3dafd6cf954e3659ffef76fa70aa351b509466c0c9390e8efb34a377caa7baaa1a593ddf905b68c3b1ad05bbb5ea742f95f430eeaf163dcaa6835f2740265dbb96a4c3267d44faa91468e0a") 16:45:38 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000000c0)={@dev, @multicast1, 0x0}, &(0x7f0000000100)=0xc) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0xc040) 16:45:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x74, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2329.171983] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2329.188990] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2329.201550] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2329.203796] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2329.207861] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2329.218455] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2329.227800] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2329.231881] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2329.235937] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2329.238416] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2329.242661] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2329.249119] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2329.250703] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:38 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2329.269359] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2329.283732] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2329.285830] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:38 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop6', 0x22102, 0xf8) r1 = getpgrp(0x0) r2 = getpgrp(0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/ipc\x00') r4 = fcntl$getown(r3, 0x9) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/mnt\x00') r5 = syz_open_procfs(r1, &(0x7f0000000000)='net/protocols\x00') r6 = mmap$IORING_OFF_SQES(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r5, &(0x7f0000000100)={0x220000, 0x100, 0x1a}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:45:38 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:38 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) copy_file_range(r1, &(0x7f0000000000)=0xffff, r0, &(0x7f0000000040)=0xff, 0x100000000, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2329.409251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2329.446914] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2329.454201] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2329.461406] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:38 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/rfkill', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2329.465981] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2329.468913] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2329.470967] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2329.475255] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2329.480413] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2329.489046] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2329.521800] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2329.531470] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2329.539828] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:45:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2348.623228] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:45:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2d, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 16:45:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x3, 0x3, 0x1}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) [ 2348.636855] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2348.639108] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.643092] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2348.655498] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2348.657439] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.663933] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2348.672515] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2348.675101] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.679911] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2348.685308] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2348.692729] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2348.694465] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.698327] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2348.702499] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2348.704093] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/msr', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) r3 = socket$inet6(0xa, 0x6, 0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getpgrp(0x0) syz_open_procfs$namespace(r5, &(0x7f0000000040)='ns/ipc\x00') stat(&(0x7f0000000000)='./mnt\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r6, 0x0) sendmmsg$unix(r1, &(0x7f0000001600)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="63d03a0f0849e65d2d75f28ed284a73b9604e21ae7aa52505997a1984fff3f4df8c3db33c71d02db42f01206b5ed391585096be747537ab081f4b96f2acd9a0f78cf7b25c4a99abe56b8a94f76e390da7e42", 0x52}, {&(0x7f0000000140)="543ad2223b4d9ab4b1b846d6287bcda2da7da3412352c602cd2fd8c747fe760742328296cfb0e7b869000d721644c66548dc0a7d4bbdb26d0e0c9d71ef947362c10e7b4166e019daba34d6a324f9b7cb18fe9113673572fa81697b70d29366f87e3f3713ad0ee0a81630afff78d89646bff68cbddd34f26875380130b0b115531cbbdcd6c842df6bca23388b26052ee9253559f995018bf6b8348876b2ce3024924f078ae2ea7de34d2a97250b74af2d1ba0", 0xb2}, {&(0x7f0000000200)="aba16d907866d6b78afe6cd13f44c27313c0891fe6b05f554cb9d092bc237c46591a2de1b63cd8ed413cb0d0448f51e8acf385ae17f30f2cb1b5095b6758d6aa1162763b9763c31fda22116cd5e33e51b3dbad4684ce955ca58880aafbf125ccdbe19a33981a06690076ce8a32dc", 0x6e}, {&(0x7f0000000280)="fdcb396bfa875e5052695e9d413ffbce345c45f6ae3f1f67293382a4ba1497eba8bb2ff90c24bf5d8769d12b8f814a9dd403", 0x32}], 0x4, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r2, r0, r3, r4]}}], 0x40, 0x48010}}, {{&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000400)="1795e812e72593b7ea", 0x9}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20}}, {{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000540)="913c04e3462ab88cba31c71c87c0832a73ba3ffa86d37e401a28d1405de84cd99c45d32d72310a0c829724182822e364eb77c5f04bfcaa3bc77f1c7400bdcab200e5f700f5d05734b5c7b108a998a9bb97c8f925a3fb16ee2600", 0x5a}, {&(0x7f00000005c0)="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", 0x1000}], 0x2, 0x0, 0x0, 0x20044004}}], 0x3, 0x8814) 16:45:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2e, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:45:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2348.807261] audit: type=1400 audit(1701276357.774:212): avc: denied { create } for pid=14339 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 2348.815931] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:45:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x1e2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2348.826827] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2348.834963] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.859212] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2348.881305] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:45:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x6) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/207, 0xcf}], 0x3) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x0, 0x80, 0x80000000, 0x3, 0x3e, 0xb8, 0x384, 0x40, 0x15b, 0x10000, 0x4b, 0x38, 0x2, 0x0, 0x2, 0x3}, [{0x6474e551, 0x4, 0x5, 0x1ff, 0x9, 0x100000001, 0xffffffff}, {0x6, 0x8, 0x2, 0x7, 0x6, 0x9, 0x2, 0x4}], "722956c886c36f0bc6fcdabb6d08ac341b5d0eaa60f2655184384a026bb980d172576eec5611f4552cd08c1314fbf74486df41cedfb71780224c388da3366f08ac79ab14a6b5061f5ae7c43ff952ad78b8a906eb2f5b37154ed0", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x90a) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESOCT=r0, @ANYRES16=r4], 0xfdef) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000540)={0x3, 0x10000}) fsetxattr$security_selinux(r4, &(0x7f00000001c0), &(0x7f0000000500)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x1) [ 2348.898363] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2348.914064] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.917888] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2348.920293] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2348.922068] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.941394] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2348.954727] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:45:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2348.962844] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2348.967077] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2348.968901] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2348.970544] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:45:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2f, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2349.038176] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:45:58 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c800}, 0x84) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x104, 0x3, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe9de}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x8]}, @CTA_TUPLE_REPLY={0xd0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x4006000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab', 0x8000, 0x25) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2349.120452] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 16:46:11 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:11 executing program 2: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2ae378000400", @ANYRES16=r0, @ANYBLOB="000125bd7000fddbdf250e0000005400018014000300fe8000000000000000000000000000bb0800080004000000060002000000001400030000000000000000000000000000000001060004004e2400000700060072720000060001000200000008000600810000020800060008000000"], 0x78}}, 0x20008005) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r1, 0x0, r2, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) creat(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x1e5001, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:46:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:11 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = syz_io_uring_setup(0x1004d4f, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f0000000100)=""/165, 0xa5}], 0x2, &(0x7f0000000200)=""/214, 0xd6}, 0x0, 0x10040, 0xd32bf07d1695474d, {0x1}}, 0xfffffffa) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:46:11 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:11 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:11 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2362.980913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2362.996061] validate_nla: 1 callbacks suppressed [ 2362.996067] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2363.009959] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2363.010938] net_ratelimit: 1 callbacks suppressed [ 2363.010954] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.016991] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2363.022757] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2363.030129] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.032512] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:46:12 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x31, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2363.038502] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2363.047052] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.051193] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2363.055732] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2363.056623] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.060610] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2363.065893] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2363.069121] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:12 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/lockdep', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x686003, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2363.097789] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. 16:46:12 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x500, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:12 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x32, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:12 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2363.194087] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2363.208309] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2363.210882] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:46:12 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sg', 0x22902, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2363.222157] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.224810] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2363.227780] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2363.228634] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.250009] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2363.253772] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2363.254795] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.269107] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:46:12 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2363.305344] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2363.331946] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2363.336731] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 16:46:27 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) write$bt_hci(r0, &(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYBLOB="2f403861cf33cf723b14e0aa84d3185e05d66d7e5847e557708e239f6fd0f13842c784b668a9c32952b5534ff420b744820d4d75d5ed48c49814995680321af6cbc93d876e81a00b45d895f69e222ad5", @ANYRESDEC=r0, @ANYRES64=r4, @ANYBLOB="71338f9afdfa2e7aab5209459f1078cc6d8ae612b4f1ff000000000000806145920000000000000000a8b3315c5dce1372d39eb094365f2bdf5489f6789c7e641fcca19fd444439a0d76dac670ff4cd58fb468fd2952bfb3baa1efae5c3075867056de053734c0114c708187835bf8be58aa5f0bc9e2ad924ad60d8ea1104b48d9508047f10288fdb2518d09ca5bfd6c4db09bf29274e6214ed7f12a351c1a689951d51e1b2ba66a118f20ec86f9fe2e8b3e83fa", @ANYRES16=r1], 0xfdef) 16:46:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x600, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:27 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2378.104442] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:46:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x35, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = syz_io_uring_setup(0x4dd, &(0x7f0000000180)={0x0, 0x71bb, 0x0, 0x200000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r5, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001600)=[{&(0x7f00000017c0)=""/76, 0x4c}, {&(0x7f0000001840)=""/196, 0xc4}, {&(0x7f00000013c0)=""/38, 0x26}], 0x3, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r8, 0x0, &(0x7f00000019c0)="5a245b7f07c362b84f97563423b4321dbf0a33047503de77f3ab79c447498a3c1cd438896019848aca97e58dbe4baf0ad973e8d48698ceb7fc4ddb49ad2f3f", 0x3f, 0x2040, 0x1}, 0x1) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x6, 0x9, {0x0, r4}, 0x80000001, 0x0, 0x1, {0x0, r7, r1}}, 0x8001) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000e, 0x4010, r9, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10010, r1, 0x10000000) syz_io_uring_submit(r10, r11, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x69, 0x100, 0x31713}, 0x10000) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r12, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r12, 0x0, &(0x7f00000002c0)='./file0\x00', 0x8a, 0x1, 0x23456, {0x0, r7}}, 0xffffff3d) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd709) write$bt_hci(r0, 0x0, 0xfdef) 16:46:27 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2378.112835] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2378.118312] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2378.131961] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:46:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x37, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2378.155061] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2378.169018] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:27 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2378.172918] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2378.176285] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2378.178152] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:27 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) fallocate(r0, 0x6, 0xffffffffffffff5c, 0x1fc) write$bt_hci(r0, 0x0, 0xfdef) write$bt_hci(r0, &(0x7f0000000000)={0x1, @disconnect={{0x406, 0x3}, {0xc8}}}, 0x7) [ 2378.206204] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2378.208185] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2378.209948] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2378.217813] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2378.219115] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2378.224560] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2378.228782] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2378.233890] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2378.237900] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x52, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x700, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 1: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x3, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}}, 0x88) r0 = eventfd2(0x5, 0x650286950943fbf7) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x0, 0x8001, 0x8}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x123942, 0x20) creat(&(0x7f0000000180)='./file0\x00', 0x80) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0xfdef) ftruncate(r2, 0x6a5b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r4 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x8000) pread64(r4, &(0x7f0000001e00)=""/4140, 0x102c, 0x41) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000000c0)) 16:46:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x53, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2378.346922] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2378.352694] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2378.353620] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2378.381027] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2378.387829] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2378.388657] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2378.403467] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2378.414936] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2378.423013] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/cfg80211', 0x351a01, 0x1ad) 16:46:41 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:41 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:41 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x900, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x63, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 1: connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x11, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x4, r0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0x3f, 0x3, 0x2, 0x3d, @mcast1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x8000, 0x7800, 0xfffff3cd, 0x80000001}}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @local}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x4, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000100)={0x11, 0x4, r9, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000009c0)={'syztnl2\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x2f, 0x1, 0x7, 0x34, 0x20, @remote, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x8000, 0x700, 0x5, 0x1}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000180)={0x380, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7929}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaf8}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x1, 0xff, 0x58, 0xd4}, {0x6, 0x1, 0x2, 0x7ff}, {0x7, 0x3, 0xff, 0xfffffffd}, {0x6, 0x9, 0x31, 0x8}, {0x9a, 0x1, 0x5, 0x80000000}, {0x6, 0xc1, 0x1f, 0xffffff00}, {0x7, 0x6, 0x9, 0x5}]}}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x800}, 0x1) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r10, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2392.472876] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2392.491117] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2392.505995] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.509870] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2392.526060] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2392.538053] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.541897] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2392.544361] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2392.546219] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:41 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/iommu_groups', 0xa0f03, 0x41) write$bt_hci(r0, 0x0, 0xfdef) 16:46:41 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x2) 16:46:41 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa6, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:41 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0xa2102, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2392.710020] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2392.724878] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2392.735251] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.739167] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2392.758977] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2392.768959] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.773916] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2392.776917] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2392.778914] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.788527] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2392.804715] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2392.806689] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2392.810129] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2392.812180] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2392.813736] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:56 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x0, 0x3, 0x14}) [ 2407.276307] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:46:56 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:56 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:46:56 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfe9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) write$bt_hci(r0, &(0x7f0000000000)={0x1, @link_key_reply={{0x40b, 0x16}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "e187ffcb4e17faad98762a0a8f29f4c8"}}}, 0x1a) [ 2407.288905] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2407.289880] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.292079] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2407.294836] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2407.297445] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.306654] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2407.310349] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2407.311203] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.314644] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:46:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x9c0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2407.331365] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2407.345206] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:56 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x60, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2407.369021] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:46:56 executing program 2: shmget(0x3, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:46:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfea, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2407.380545] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:46:56 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) copy_file_range(r0, &(0x7f0000000040)=0xffffffff, r1, &(0x7f00000000c0), 0x1f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8842, 0x204) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000140)="1550ec9d8749b1df524987e8a0c86e24144b6c18df6359b7a1c44b79f113508dd207c09ca878d891d4b9eff3b7a639b9014cb546b366f160ee7a84c66de66a9bef07bfec4aa6253810b99ea21d02059b38ed17", 0x53}, {&(0x7f0000000240)="484404c6bdc2d62424ac3e0d865f3f86b3737cfde419e83c7f4b29152e17be5ab4ed7dbfb617ea00869d987947319b64b8093b22b2aaf3b2fbcf27836459da2ce5a2ee96ab4d902249ca33e4f1afd68b4748fc0f4dd664a25690f65ba3e7cce21040e68c6e180870c7b79b631b180497023f45d855de7b27009591beb716c4fcd6efd53f0b51ac06c2db52724decbc4469615aed7d21546b10fd5feb03", 0x9d}, {&(0x7f0000000300)="5a9fe87c469b0a824e464eb58f9f0f89b3f779e31d5c7aaea8b134e1412c57d063f062eac75e54d5b95f6174af3f45ac0a4ba8709dde28063b95798683d43283c0c7616697045fa632876a90b3528c3fd1996cffc90ed3763f2a7a8e1966ab0fb351120d85", 0x65}, {&(0x7f0000000380)="88d1e3bb97acdbf897e03fff4a82a90160acb4ef80036d49337eb73692208deedfc267748b94904947531fb710b980d262a62445d393762482dbc8724779d4281ceba7cbfde9af27185e83c919a30188f36cb6b7366ef614a4a984f1d5bb2ac3c1df5dce0b5568284097922273bf671bd481caee2ed755434c8e2232e729bfb04125bf594f29ec824122e82f0643c30a948b11767760732c1e0d62b83f9a29c351e0298472353c57edbbf70c31", 0xad}, {&(0x7f00000001c0)="25afd87bf8ba7fb1b126f58be5454ec5", 0x10}, {&(0x7f0000000440)="9d1b03692c7f9189786b5249f4a159933a3b4533d5a7d871d0feafe63122fd2a2e75112518f73a7d5f1ab4da4b24a293476237a8aaf6afc51ef61aec7cc9557b672ca0af5cef059a99f5266f93d29d1c4fd3771035b039a48a783c96fa8e32b4748c287c46da0838a62a4ac7c7a8e00e1dbb3ffa82", 0x75}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="9fea6d52aee4321e3a9b5c93956615647cd9c355d9bedbd687f76c1c24408befc72534327a3c1775f4a98820a7690bbdf7aa0eebf48be6c9af1c16be5648395dc0eeb86dfb121fca3b0e4c88b0d5dddadcba7f69a824b32955d12430b8947c97660dd4c87003254decba741b1daf8ea43c7f54483ccc6c3e184c97d447", 0x7d}], 0x8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2407.384446] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.415804] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2407.420786] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2407.421922] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.424298] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2407.428048] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2407.432194] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.440988] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2407.448084] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2407.449195] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:46:56 executing program 2: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='\x00', r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) io_uring_enter(0xffffffffffffffff, 0x6cd5, 0x7fb6, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r5, 0x0) syz_io_uring_complete(r6) syz_io_uring_submit(r6, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x2, 0x2000, @fd_index=0x8, 0xd5, &(0x7f0000001900)=[{&(0x7f0000000300)="22a7340fd9118ae760d45f31f715138d66ebd4822a1fe326c0a609be338679e006608df89326eb9848ef6e202a02af635f701202f312d5516a5237cbaf12279f661851c267c4482d8cc1f01611b2fc9467fde1fb5616a57a993aa5cdda94ad5b6105fad0a87a7d9bbadcd2889d1632dde97231e730", 0x75}, {&(0x7f0000000380)="3a855637cbd36e71720413feeb9478a452a2ced735293f342825126077d01a5053c27790113443f6f99ba8f4f67796155c5c37154eeb127de396366da9655a6b3398408567ea56d977bd494015a72496d7c682cf87d65bf1e77ac35f2aaeea7aaf983369e7c631adcf73d2455956a75a5d8e8a6aa6240758aa799dab961da72e53006acb5121c0d73ff503712170d4a1c1dea20b825dd62c539658991b9efa17ee2bc3a08c36280c38", 0xa9}, {&(0x7f0000000500)="49326403de3e3297668fcabde9fd0c3b3fd00f25157cdf22a9180e8af0d086648ac63152af3f7c70ca7c50ddd19e0c34e1e47da643daf65e164083b4a4c1c8859e503ac3da15bf8c4a80fc41796ff30787c618508edb19eb1f85d6fb429e8b9833d151b3afa6dc002a11397005fddae51c49ea1ae247dbdd8a43bea42eaf84b216aeed8e0c528a935f85b6646b0322fe0e08162c76922f3a8d550e2e628342b63fff76371ab0e68621c86622373c4c6af0ee5c841c8c80dc2584dabc04305e17f19887fe07c252102ee4", 0xca}, {&(0x7f0000000600)="3b1db01bdbaf9995305a7c85b98ce60e6b9f811315df939368c7211cc818abb80629a3fa04c0efc8540a1853b4e3b00cfdac38cd2e18e08a84cdbb487286301ed169ddc3958321424cf2dffb57939e21456971b152c90d79008f638ca61be62d35f86fbb33ba92b6c19537dc3df1728405aee6466ccbdd7aa20bee732acdea9f7943f2a58177fb6ae4d4f212c36103a20767872e725e6040fcfb44edcee8366c54a17eab0823bb06e6718b1251b19f8856bf42aa647776dbd35eec9087d726a10faadac9bb2987c9b11f64270ce0186a65d3ca788ca4d009481bcd51c032f7", 0xdf}, {&(0x7f0000000700)="72ed5aa8b1bd71e8b159903ad9264a3b38ff6892af27eb64b60565b902e11691d6e80ce8dac07f52634472db56af87301328b1f00bf6cc46a9679737707d44d949e76d81122cd4ed2e0b72a28f6901463e4a1e9b97b54b2491eeaea5cb2acf5cd7e7b8a8c879bdeeb582", 0x6a}, {&(0x7f0000000780)="a3f117c3346af0e1afccb6990302af3e17bef1008e59801c0de3cbe1854d7e5bdb31a619df8fd57b7158cd1794b2694409dc9fca854083b9093e4298249c37052786438c25098555399d7c3a82dd814b00ae42a757", 0x55}, {&(0x7f0000000800)="dc201ea45dfc59d906f2b92b44dd5bd2fa83573b08622f823e958ba126270aba50d231752c133b7ce76995482b037f049c893e6ae5244e59875d6d5b9190dd32ab22343a5227bc75962c2c9d443e0e5857997112c292013fd701305781e98375f702c8eff9c409e7b166c9a784d59af52c4a13b2", 0x74}, {&(0x7f0000000880)="4759d2853f1c3edd669e2607d3fe76c59af3bffb19485da59cc3135a0ff67295d9ccb66b372da7a3b72435284916c86ba9fc89e74e706eb6b08bcbce1c9adf8dff91c0a2329ee30485110a493b5290e8bda9b74004166eed1384d404e8a99df8366105d4a01e9f7f9dd07b7020cb77637542b6156df89e210e3ed6fa8b0babcc56d790630722a92bc7a22c7c7792167ba2906920f4f9204b10756c84ab4b78e2870efe61745ffe7011948fba3379fad5b488ec7bd10df205845d5cc0a49ffafddbf52a5c3bcaa3ffe9e9707c502e4727f061efe49bcdf0f01d2fa76722093b5d28ca37abd8a667fa153fc9248464743289969743dabbf85f5e4856ef5976d1eaaaf75b409263ae5d63a64caf3abeca1340ad2d9cfecbc00ee6afb9f35894316d662e5e32e873f10e620dabc4b39f314bbc2407ee6aa0c057caa288ec2eaecfcb4cc08d60d05a5948762fde2f128e75363d86c2d4cae48eeffa5258b3b1d2890066028301277297811ae87103105b4c2d6238a8431fbfb93734e9f40c5fcf71428d459f8dfc25a0669acc2c8b7c062b007047ef549871128bda9458c5807942549361826aae4d7a3c58f4404d09f8cad3bdb8b5184104347ae16a61a74ee6e23ede9127b7001291ab0ec39ff4e541d600256139b782454ff9398665abfe2eaf92279fa3963bd96464cd3e4e4bc41e6214641b8463efb5023af59896052ce693f7711f22386a02c5b3b0317acb1c6cb14dd2148ca46c96e2b2f9ece4b6945f0c249a9e1a882e8fa8f2ba09e4f3468050a603935bfc7626814a66fb7ebe8746a07023bd555e705423354fcd6b77e5f2b7b77cb38934e4a6f54e75c14290180d65bd8f0f0c01f009c2f58d205a2cb1279823f425fd9c4a841733442d4280f982f026f918a4df70c663705b6a113e23283a1b3e172ceefd6bdb51f2659a49255c932a9231e921f27b76989de4dd9317106200fe4ba286801c3b8ec02df829f7a7f10135c28d5636e183d24b5cdb8173c649578194a795af9e339feae5bd2bff900e2cd8b6c540da2c70179b6503dc3d14aa522391bf98905b2475d939c2f9973d00ea23637cf8c2ee2513ce8552ca7e26bc487f5e9af3465c074a100cf21f6b166a8c43fc70c86e0f95cc9b6a6835e4db87fd858982b6551e80c621617106fc81dd78713b3e33a3de2196892f200222fb792a07ba01301968b3827ea5bcc4edb6dd62aed8f31b98930359f4c1717d4ee220a66abcac0accb017a9a54614b3c0e295fe525358e5103b937941f0f1f6202bcead4b00060f7f301d2e13e4563fecf2f487dbcc77fc4957b35281d094add79b92d1b15405b406816a70eaf5988f66a111c803814dc9f9189d55763231098443d55339dd06ac16ef19b8bb3f693b50e409d79c2022a3ba5005ce6b16713a312a917e74c70a5db2ecb74babf32a845680683eb3a5fb6ee60b977d691a87ccf16111bea3d97bbefdf669067d2f2ca1b060659bd9a7159b06d708160eb000d760421790ee7cb4f30dbd08ce5301156764946eaf9d2920bd8fba834d0470ad35255f964293f59e2de8a519162f20354de9b6f2ea4929f26b32df1c64b3f971d9319f04af763b7c5fb27b46fc45d97805dd5b06bb448545da9975a3d2b3893a5a3310899991ad4fcf0c9285f975c0ae793cc19bf16aa05f7763a3666cfb7f5b3c32a4a9703a65005ca23ea52813c460adba3d5922e0bd56f6bdc976f891442149b7fec506ee001e974e104be282b8b32b8c756ace6bddbc77737a607523cc7d8c638b0048efc90f200f95a1f733065f9797c55524b05ee9fcd82884543089874295b880668a562c7c8a219958aa62447e73e2624681302fb2a081c8b46259b1a067fab8e730813cc43a3a77f2fbcbdcff686e6fef47b3bc8e1f7dd4a33457de537b0ee691405dc1b119b3305d87c76945722649baa510ee601c0db8e79b81eab474a6fe7248e41d39c83a2a2c70a518dcf09c2b47ace703eb6f4847e267ae0f5de164598b45c63b9bf8193bc534249036dc1189fbd5cfe0f3ae2e290f2995c3d075b5eba3ac6cd078df1725e512b84449f2100658492e8199f0a6979aea8441af90dbe3c3df8cc723a6d5721c3ea6f7e22c4cfd175a47e62ed3e18a8cd274aed3565a23b5cf72ec3ca891a874597a0c6a7f5712dc1466c65877c2e722c8c8b3373229960679b612ef7e43996f49c818ede4a78183e8d71f259428770f8adb6cc8c248369c2388dd46a2b93a84f3cb94018570d255085224f6143f08e3096c060d2afaede3b651106f7bd6c980975fdb34d4e34d9a373ccba8bcb1309a780e935ba683e4ec9321cfeb5785133617c8229b14da41d8195d802310d05138dc717d791e072c1ac361da10a977169be37d1573f15013f6b56584ca557c674035e159b59673531df073fdc898c744582f5ee2ac87689f35cd9fd80358fc7bd9de839175e8f6c07d93c68e331436a2dd74638a1f0b96972848246761994aa725a678012bf2b6e68fc5aa16f3c158dbff4c81edeb94f14c8d562fe94fdf0ffea3f4b5b63f0e29c84d4115c369961debfbe629756d758b4c77c3cfaccfb8f43b2bb46b12cfecaaad7084066e6e36e00bf9c83e07f83e2c17a279e0ff51c0032e5d507158f88d85b9c11e1772348cb6373be968039dd37f1e9d419f4ee997002bf9091ea271ed5449d7f063b956ca5509dbfdbc8d063e09ca661dc3d46f6d20397690c8688a96cdc171595622ba5e88c34c04b871e6e88df773cd80eff98e7d1b4bf3c2d09082d8e1545376169d7d86d9ee079f26ccdbe02df82dded419d651afe0da1a12575285dae81aead8a03e8328eb7ff75f8111143e6d6496b1fd7b5c180a8c83c16c836422dcef84bf5f7ad40fdb4a36afdd3c7cb1bb5fa59dc421ea6805950f5263a08095f9fa27a8c96705f4105c38fea9501581117bc2aeb30f2eb8d68028d80549594f2b038bf353a42b117ad1ab4d3f1ce9c108b76b354150c06cdd6e76115d5261e2e715661ca8e2687888d75ddbd7509f61cd28e46feaf673d800049ca036c769859754548fcc2d316f74c1220c86186fd832ae10894d7e416594b769844f4f74a6edeefb097629a7a42d4224caedfb6822c9c37e4c36fa666bccb90ac69be0d671adc5deef6bd057feb2aacff7a474cf7219911f1ed34eae2051fd9afacd50c0cdc01afdca2c9fea87c6a8fcb52731945ef4459a0ee9718fbb055cfd707e893d2e01ce3ea75a7592f8fc87a1f6b3bc975bd742734e15dce11545bda3ec46518f99a12f5c6e358c6642976378bcd9cb40b66298d22b00c5e2dfd394edade7a0109214d70af6c3e9b20b2c3a0a48e39ce08198506aec8c9d4c50b7f3d2d640f5037987b2cd5ff69a2bc0b95f5c62a64e9fef3816ffb6fcb7e10c6c3d8e9dea0018eda3e3eb4d0608e26fbf29790a15c213e14967002348c1695c23e0d4f1f830c6df5d381d7ebf2d893a2dd3be61c37c661720cdee4cca7a5704f59f9a1c5773b42940e136b2d9ec31a25435bca8991bff73b34d14c8876bfb5007d04c40e4f9bea7637d4a75e82858891d0d8aa138d71a27eb84ee6c374cd861188e11874cf5f205b84a67546c7134dcc0becee3590c80b1fc82be3836d890ddebbe5832788b9eebaf4e5911cc9bb5d01de4e470c8277e88c780047645863b471cb176cf0f5fa528d14d70736983eecd5ecbf46fbffbde7df7ab8907721f02bc97affb77cc48bfbc701c10ca6661ad289aeea3b013bca7bed82c4f9281e0023056c9b1bf0227e498e95fbec81d02acf268a43b38ed00822a6966919f5c34c0b9efe8017f536e113fe4d45a53c873d3e32dcf2d130ee2f2ce97c86e5fce809a67a9a4e41bb4255e4e2c86ea972f33f2dfdc537a726df7d48252255021a94dc531a6f1d5f26f03a097c807dde1f5b8da701229dcd35854d2f055730697f42a8ded418692daf0ad7e0816e68d6595def106a33c58ff82b417bcc936969e4ed3dc0095cb8569c42f7e2e77da7229098dd64388bab5fda748feb77cce6d2c607bbc07cdb8deb2c189f43fa3c44b30152f0e01f019679e00a3be996e6c5b5ae4f93ff42a5b3b72f9fc29e04b3653e37d0417fe4339a6ae3463a396ffe46b26a64876f2e53edbe901a25549ee359b841ee7239a94ce868b8a43de4630bc8abf8effe18086565222d8fd929702735c54890e40ecf3fa30e51b34f0a98f4fc0e6f114c48bd700a66d08115b7a80642864f9fa4154c705068b6a531596642b3de74f103f5e1d6bf0657285e478653d7257298cbc855b1ffbebb582e4eafec82b25a35e15fe50e61bd5041e332f2973f2c6c47e64bbc0ffe7565657c49ed6053258dfede3e6a53d59b07236de589dffe9708b8075313651731f84c3a3317c8ba3f99405dede13d5fa99f665ef6135c7445655b905d91457591789dbb0dfc39130837dee90269001a0b494f3a876e3d6c0c8cb19d6ffb2f83f957f7aae2562096e89bb0ee202bc9b6c1e39d24f52e458f537c25c1894d7c9afa411802b1cc9f2abe00b592e3f4c0b9e96eb2f6bb093a12ff4437dcd404b7ac6111eb77b89428b7bcf748bcbd89cee71fc2ddaf161c69f1a27479e3c5f797ab0b929b0d033a6cff7a945fc2b971e79c408b34eecfff623f45aeafb02a70359a3dd65f5b04ddef6ddcf8ce945ab6d5c9f4f59c6c1c9be591cf399764243cd7efa2ab7f7eccbf797d2c1475fe60e5fa51b9c7bb5a5f025c09c628bd1cdc03920afc6a747b8307eee2193bd50b21b220b44e323255a6b395a6d98b26f75f107f0a953eec85645d53c5e3880e2a64660a7314ac408e3c7c651f6c6626ef43463e9002368abaf72ad7a750f9ba81a6bcb376203c4fda92500d433781791516bbd71991367388acc20528456b27e63e54cb67b702d05bfcee11522c110195b1e59b4aa9e39a9c9da1ceffb14ee8271f89b87edbf0e4897c6c0956ef8d38b890e11429ca560d171f04531c6c16fbe91229e5564b25c7ff9be69425415906896c066a4044f4c92951dbb80e2835acb7b88fe567c7bdbf88cb2c03b4b66deccd638a59e42bb844a7051197f3f0d085d011a4374eb033c12716d3020fcccbb89b3ad13653185ef904c0a1b62a8eb72ca30ea2b2a85224c8bbf1e6ef0464a1f79d50d3b1ef6f96507105934657f10f7c76dc6d823c6ad7222f87fb8c70223b6e59d664648fd88a188a6baccf9a9d6b345559972bd99735a47044d7196ea009010da50bd3e56e7c6672f26b1a3cec77df56f6540b80b8f785699bf9365a8d90fb758773da5cd054cdee5836012989fb0a140ec20fa683e91e21fadb0ddb8c72dc48223f0da1c6d39bd6efad02f1f2a06b68e46aa7d61d678af2356493b69881d885269ec4ef97533889cc2b115235f6fbfa8e2cb043bef7fb84229beeb752600280bc603c4679a335682cf3d3b0abff1a9a47227179b709575ab37f134a787ac45bd7b94f42e15b30d46183c27c941c8e720d126d86ee4d4dc8f422d10bd92e775723444ce07eb17fcd89e144bc0d2346425436ada6e50c027d1ceb2505919873a0a3b44d24e7da45fedf0168b884a829df3fd0c61e4783d4778cb7a685b35a881058fba218441ba1377823c9229a751432bfc5b0221790d21d369801e3c8136f3e77756e90bf958cf9c6efbf29d29bcb5feb81e6ef0920d30a5acd557d8fa0ea4d5a4d6211dd0ea4154cc2725ec536f472f4d5b53dee06ae3e26ecf03a736bb57214bb74391c80e027b44a8ce911c06806d9e1f68be267bf3577dd8d3d63379cade029676a2749948925e19", 0x1000}, {&(0x7f0000001880)="a87120a74ef18376e2ca1c4265ac34de4a7bb8b6b5c4bcfb410766f068b7f517453e675bd0f9a78b94acccb05a913c5aaa5ea786762b27ba776af94bc31093185d63fd718ac04ae2e3a4ae99d960b29e9e0b9dcae1ad95f29a3179eb4ef15e61768854", 0x63}], 0x9, 0x4, 0x0, {0x3}}, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r7, 0x0, 0xfdef) 16:46:56 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xec0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:46:56 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x68, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2407.527171] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2407.532909] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2407.536431] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.557100] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2407.562778] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2407.569775] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2407.594428] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:47:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfeb, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:13 executing program 1: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/79, 0x4f}], 0x1, 0x4, 0x9, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 16:47:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) syz_io_uring_setup(0x2fa, &(0x7f0000000000)={0x0, 0xc72f, 0x0, 0x3, 0x3ab, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x4007, @fd_index=0x6, 0x5, 0x400000000000, 0x7f, 0x4, 0x0, {0x1}}, 0xfa4) write$bt_hci(r0, 0x0, 0xfdef) 16:47:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33fe0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x60, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2424.526434] validate_nla: 1 callbacks suppressed [ 2424.526444] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:47:13 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x120) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22d03, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESDEC, @ANYRES64, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0xfdef) [ 2424.547879] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2424.560176] net_ratelimit: 1 callbacks suppressed [ 2424.560185] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2424.564680] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2424.566529] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2424.568179] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2424.570178] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2424.571321] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2424.572191] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2424.590208] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:47:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x200001f4, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2424.604229] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:47:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x74, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2424.614285] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x162a02, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:47:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, &(0x7f0000000000)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) 16:47:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2424.662976] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2424.667811] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2424.669229] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000000000), 0x200) [ 2424.709861] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2424.714292] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2424.715496] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:26 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:26 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2437.962107] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:47:26 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7ffff000, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:26 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x68, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/keyboard', 0x10a43, 0x53) write$bt_hci(r0, 0x0, 0xfdef) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) unlink(0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') socketpair(0x1f, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 16:47:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:26 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) copy_file_range(r1, &(0x7f00000000c0), r0, &(0x7f0000000100)=0x8, 0x1d, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, &(0x7f0000000040)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x7, 0xff}}}, 0x6) [ 2437.965489] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2437.966637] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2437.970652] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2437.971925] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2437.972866] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2437.995416] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2438.000518] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:47:26 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2438.006328] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2438.008933] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2438.010527] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2438.020797] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2438.043815] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2438.049407] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2438.050417] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2438.070070] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2438.071611] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2438.072492] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:27 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) syz_io_uring_setup(0x5f03, &(0x7f0000000000)={0x0, 0x3228, 0x2, 0x3, 0x6f, 0x0, r1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) write$bt_hci(r0, 0x0, 0xfdef) 16:47:27 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:27 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$P9_RGETATTR(r0, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x890, {0x20, 0x3, 0x4}, 0x80, 0xee00, 0xee00, 0x4, 0x3, 0x800, 0x80000000, 0x8, 0x4, 0x5, 0x5, 0x8, 0xb1d, 0x1, 0x101, 0x81, 0x70000000000000, 0x5}}, 0xa0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r3 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x424}, 0x1, 0x0, 0x0, 0x1}, 0x8001) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x80000000, @empty, 0x2}, 0x1c) 16:47:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:27 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2438.129297] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2438.138788] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2438.145004] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:27 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2438.174810] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2438.181885] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2438.182970] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2438.193718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14677 comm=syz-executor.0 [ 2438.201329] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2438.209257] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2438.210168] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2438.219061] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2438.234477] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2438.245914] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.108243] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2453.110335] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2453.111927] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:42 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:42 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x161, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:42 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:42 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) pread64(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x5) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)) write$bt_hci(r0, 0x0, 0xfdef) 16:47:42 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x3, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x2000001) inotify_rm_watch(r0, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xeefb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0xa4000004) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0xfdef) 16:47:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x74, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2453.138001] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2453.143868] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2453.150469] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.152826] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2453.154099] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2453.155048] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.156222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=14699 comm=syz-executor.0 [ 2453.165640] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:47:42 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2453.172119] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2453.183757] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.221298] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:47:42 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing', 0x42981, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:47:42 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2453.228129] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2453.231348] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:42 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x4, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:42 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="cc1fecbb4c17b954feaaffedf7301d5e02af59504bc4a7c81fa6101622ca2da2cd076159cd4d4816812c53aaa3e0dfbb159d41744fe63543fb587ead03cd7b35745f2bab746439bf587ab3e94ed429d0ea7ac9f054bccfa020ab0b48719c57b2cb9f8b25000dcaa4fbccdcb39da2e87ad8177d833f6bb38e45602aa115105926c6815f651aae9a38e512f9196c90a721e6b500ff29ec67458475b466d6952c071fbbda850442ea4e3fb33aed5b9aa41b3b602887f7891f79edd5f639319450dc97ad0e79ce8e565848b0e47e5143beeb42296f7860", @ANYRES32, @ANYRESHEX=r0], 0xfdef) copy_file_range(r0, &(0x7f0000000000)=0x8, r0, &(0x7f0000000040)=0x7, 0x7f, 0x0) 16:47:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2453.289933] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:47:42 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x500, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2453.308890] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2453.321147] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.325076] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2453.337889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14718 comm=syz-executor.0 [ 2453.337915] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2453.342472] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.360782] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:47:42 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x20, 0x3, 0x2, 0x46, 0x0, 0xfffffffffffffe01, 0x4000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x8, 0x9ad9, 0x9, 0x2, 0xff, 0x7, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0x7, r1, 0xa) [ 2453.373717] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2453.382790] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.386027] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2453.388002] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2453.389662] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2453.424197] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2453.440496] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2453.451409] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2468.634492] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2468.637950] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2468.648951] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:47:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x5, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1a40, 0x4) 16:47:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write(r0, &(0x7f0000000000)="cdce8115b3812ef50afa7d064e9c7b57f5a5f74209fa737611ec7f4dc61688fb4174c8a1c7f3d1a70edaf2cab4c45f491c2b15a592ba727f45639e2f7a68d3e606328e32b08371084ce0b3886ad62c7e6c69cea534fba7a2c7d24bb313514655f83c9ae0af48f34df4c812df48", 0x6d) write$bt_hci(r0, 0x0, 0xfdef) 16:47:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7400, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x600, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2468.654887] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2468.658980] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2468.660837] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2468.673962] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2468.683896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=14750 comm=syz-executor.0 [ 2468.688884] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2468.706240] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:47:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = dup2(r0, r0) copy_file_range(r1, &(0x7f0000000040), r0, &(0x7f00000000c0)=0x5, 0x100, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x404400, 0x0) write$bt_hci(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="c4fe51"], 0x7) openat(r0, &(0x7f0000000140)='./file0\x00', 0x20041, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x1}, 0xfffffffffffffe5c) 16:47:57 executing program 2: unlink(&(0x7f0000000000)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) mount$9p_rdma(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x12002, &(0x7f0000000200)=ANY=[@ANYRESHEX]) write$bt_hci(r0, 0x0, 0xfdef) 16:47:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x168, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:47:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x700, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2468.853487] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2468.866846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=14770 comm=syz-executor.0 [ 2468.870339] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2468.877348] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2468.882281] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2468.886314] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2468.888429] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2468.922748] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:47:57 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid', 0x0, 0x192) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) [ 2468.931064] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2468.932613] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2468.940554] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2468.945055] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:47:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x602502, 0x0) sendto(r1, &(0x7f00000000c0)="9da6534547f48daf2e1fd6b6e48a68acd19a01c5500b81fd03e16fae750f359fbb9f98b96515f3b8d4413316387d79ab78ca70dcd6b6c40fa0e451a2ac6b17f2b799a13c0858552723665f0a9f28b443406a860c4a8e5cf4d368928b59aff3ead1c49940beed11fac2d8c81a416e0e24e469903953aa513bc7ff4d194754080fafafc9dd50f359c3e4ba5e3f5a7f9e7eb46e7e685665805254134caf651ccfce2a69fe11e6bf2a5b298ae17e35518cbb2e8d4eb04932fb7a5bca608f1c1a0590a70a4c50852a3db98f97ef218aa98cd26a7c08d65ac010c2bbc5dee344909d27a85750d16f083ae9515d27", 0xeb, 0x0, &(0x7f00000001c0)=@ax25={{0x3, @null, 0x1}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80) [ 2468.967946] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x7, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8100, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0xc6f03, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:48:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x900, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) [ 2484.198557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=14788 comm=syz-executor.0 [ 2484.202253] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2484.222436] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2484.232414] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.236409] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2484.239057] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 16:48:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x400, 0xd2) [ 2484.240963] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.247046] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2484.253108] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2484.257515] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22682, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fstat(r1, &(0x7f0000000100)) write$bt_hci(r0, 0x0, 0xfdef) r2 = mq_open(&(0x7f0000000040)='\x00', 0x40, 0x2, &(0x7f00000000c0)={0x80000001, 0xdb11, 0x7ff, 0xa6ae}) dup(r2) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="182600697994096daf79657d17e6ea30741e020800452775993b149450b1bb11edfd960ad048d3f640cd691557b32a0e6c"], 0x6) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x100040, 0x0) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0x3, 0x1}, 0x6) [ 2484.282222] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2484.292889] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2484.294461] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.297540] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2484.298701] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2484.301660] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.314219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=14818 comm=syz-executor.0 16:48:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x10000, 0x130) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:48:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x500, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:13 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/md_mod', 0x22902, 0x80) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x10800, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:48:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2484.406383] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2484.408848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=14829 comm=syz-executor.0 [ 2484.415387] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2484.420425] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.442862] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2484.453859] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2484.462076] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2484.481276] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2484.487306] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2484.493765] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:31 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/backlight', 0x22902, 0x186) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0xc301, 0x0) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x1000) 16:48:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:31 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100), 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe201, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:31 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:31 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000000)) write$bt_hci(r0, 0x0, 0xfdef) 16:48:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x600, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2502.555094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=14849 comm=syz-executor.0 [ 2502.561110] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2502.582867] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2502.595913] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.600338] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2502.605145] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2502.606922] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.610529] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2502.614502] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2502.622320] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.626415] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:48:31 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000001200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x9c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xfffb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x3ff}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x14040000}, 0x4008000) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) dup2(r2, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000000c0)={{r1}, "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"}) write$bt_hci(r0, 0x0, 0xfdef) [ 2502.633369] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:48:31 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x5, "b431315b981982f0da2d7a487f90c8258e777696b57351352b8fda1dfffaf2"}}}, 0x24) [ 2502.636421] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.652057] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2502.663579] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2502.665275] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:31 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xb, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x700, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2502.755025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=14875 comm=syz-executor.0 16:48:31 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2502.811221] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:48:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000180)=""/177, 0xb1}, {0xfffffffffffffffe}], 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 16:48:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe90f, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2502.825203] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2502.836172] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:31 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xc, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2502.856446] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2502.866959] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2502.870949] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.875023] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2502.877418] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2502.880432] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.885272] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2502.894235] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2502.902272] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.912823] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2502.920308] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2502.921932] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2502.933866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=14889 comm=syz-executor.0 16:48:31 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 16:48:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xea0f, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:47 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x900, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:47 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100), 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:47 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:48:47 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xd, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2519.019409] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:48:47 executing program 2: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x214, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x2e, 0x33, @mgmt_frame=@action_no_ack={@with_ht={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x3, 0xff}}, @ver_80211n={0x0, 0x1, 0x3, 0x0, 0x0, 0x2}}, @ext_ch_sw={0x4, 0x4, {{0x5, 0x1, 0x4, 0x80}, @val={0x76, 0x6, {0x1f, 0x7, 0x27, 0x4}}}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3c, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7f81}, @broadcast, @device_a, @initial, {0x6, 0x7}}, {0x8, 0x0, 0x1, 0x0, 0xa2}}, {@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @random="deba4e0231cf", @initial, {0x2, 0x3f}}, {0x4, 0x0, 0x0, 0x1, 0x8}}}, @ver_80211n={0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xd3b08c9d6fa034c0}, @NL80211_ATTR_FRAME={0x164, 0x33, @mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac=@broadcast, {0x8, 0xf80}}, @ver_80211n={0x0, 0xff, 0x2, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x30, @val={0x10, 0x1, 0x2a}, [{0xdd, 0x1f, "656e14f638be73ee70e1a5cb097ab18fdcee0e1014f872460c14607e4b7dd0"}, {0xdd, 0x55, "3f5b61f68da2794ba544b95e7e150cd86c6965af449d8869dde42e63f813bd6e21b28623dcbe110bb06f9555237d726804fbf4160f4a6dbcc2df8ceb6881df8ddd67ece9fd84c79a8720d66db36f4f82f0e80e3769"}, {0xdd, 0x9, "8733b98d59bcbdc609"}, {0xdd, 0xb6, "ecca47168bbe41e182a89c86537609a94c5e74b538c6fe9904ea7df7737b204f6810ed3c8ba3f555302a36738a9e69b8c56db509b636c76adf20133fb0e8939821efad0e10a03d3e41f85351f7608712a5654afbb50224ebbe98e8194a71bffbd2a2dcb53892d390c199a92348c252f66b64795c4607fa6bf0cd6f5c488ca02e7ffb0fedb6d7e46a2b70b7bdeacc17416dfdfbdd2458e08978af05ea410b6ae4b1257dfac1f6b2ee549344cb502f7c740195c932be78"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88a2}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x22eb}]}, 0x214}, 0x1, 0x0, 0x0, 0x20004040}, 0x48040) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, r2, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x4, r6, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000680)={0x4b0, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff9}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "22affb37b828c1160410f7a45b7219afb8a427a6adb1f4fb8bc364fe2c0c78f68b19454cdc227b0795f8f5dbce2681715efb7b9d2b53e335e163992af27bceac07a3"}]}, @ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x33, 0x5, "b45c42ea6e7c995261a5fceaaea9dedde7047ec3955887beab3c92441fc928f32130054f43c4ed96d9375f7b5bee29"}]}, @ETHTOOL_A_FEATURES_WANTED={0xd8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3c, 0x5, "9f65e7dc39af68981ab4e43765d8ac8fc54f5d9c2f13c97f376a891103a5cd6d4fb10150f79096bccf20dcaaf4ba2dab94af6a224e8584a2"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "3db5ff18ec1877a22ff2a61718ba4abef29a62521d1acf41a4052c1bd3d2f1130fd81a9efe1f3b1cc1a8df9a494d789e7380c096a137059b1e2e0a6da0971dca0f5bf340c38c918695b06bf248380dea8569f42786f190aeed6ed0b2b7d8e06f6e82e1de67bc4bf48dff355252a75c87e354b251d01e4f97aadde64ab7e07ba18b4c1c3935ce02d3450c0155890383f2bcae"}]}, @ETHTOOL_A_FEATURES_WANTED={0x258, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x194, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--\\+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dummy0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@+#.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*&\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\':\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')+\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/proc/key-users\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "5a5a3976b28294ab8ead4fa3b015bb361c963f4c92c295754e6129ae8f7d11ea3097120941cc811ce40dc29bc3100841d5ba3feb31584f57136754938365eac08ce870492722df7051314e4ca193280a0011f91871f020d74ced077702adf44aff33ef24c275a5f11d04456d5b079f1bb8b77a0c27ce3b917c36262a820bbb4566eb5aed6a9d6c7ba11733d6d4f59625972385f288af271ff881b1debdc06b86b064f26c7955fe99"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000600)=0x5, 0x4) bind$packet(r7, &(0x7f0000000100)={0x11, 0x4, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x64, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r10, 0x0, 0xfdef) 16:48:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x65, 0x35, 0x63, 0x31, 0x36, 0x62, 0x31, 0x0, 0x64, 0x62, 0x61, 0x33, 0x38, 0x66, 0x31, 0x64]}, &(0x7f00000000c0)={0x0, "af168a7edb6a3796fc2ec8628d62e986c7a4ec71a85a9822aa89019cdfec1fb3b89f65e4b035da96d759ead4f3aec78018b4bf7ed7718c2fb9ddb96f4bbedb72", 0x25}, 0x48, 0xfffffffffffffff8) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000180)=@secondary) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 16:48:47 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2519.020460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=14904 comm=syz-executor.0 [ 2519.037967] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2519.041028] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.045965] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2519.050422] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2519.052291] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.056924] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2519.066955] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2519.082259] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.091346] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2519.099897] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2519.107914] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.111511] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2519.113906] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2519.115653] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:48:48 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xe, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:48 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x0, @dev}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x0, r0, &(0x7f0000000080)="358046938dae0675fdcbc6d4a8f0ff5dc66c2e230b55e52c51c16d97b5abcec77ec995860f0a27911b5f97f465f4cce2897a83e7d2588902030ad895af970e228d0b74d0290c75f0e16c53a65bfcee9a7072bfbba58e90258341f52e2a424167126dc988de45109e2a7acaed135cec8c3a221d8c35df98a8cfb2f8fcead1006aad0c9f43c21eb6a6adf1d51367cf9d5bdae50b76511116fefd46b22c07b72e9221c866909dff082107540293f4fc345d2303d781233a90", 0xb7, 0x0, 0x0, 0x3, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x400, r0, &(0x7f0000000180)="cff37602d2c8be309a3dbe5e086295ce76387120deb24040059248f41ec197249ebd0984865a53c2e58eb8f3a3a140838093e4bb764c751c6b654175edd20b849bae2a9e0e353d82c5612009c291a0483908deae87475fc1c0fca9ecea8f78583349c5acac52fbf52ddf98b965", 0x6d, 0x4, 0x0, 0x2, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000240)="5cd38cd9ed27ab1a3feef4", 0xb, 0x8, 0x0, 0x3}]) 16:48:48 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) listen(r0, 0x1f) write$bt_hci(r0, 0x0, 0xfdef) [ 2519.190969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=14926 comm=syz-executor.0 16:48:48 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xeb0f, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:48:48 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xf, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2519.287960] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2519.305839] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2519.307842] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.311489] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2519.317940] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2519.320294] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.324902] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2519.328375] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:48:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/cpu', 0x2900, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r4, &(0x7f0000004d80)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xb) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006280)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000006380)=0xe8) [ 2519.330911] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.343362] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2519.347063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=14939 comm=syz-executor.0 [ 2519.358797] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2519.360496] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2519.363655] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2519.373905] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2519.375798] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. sendmmsg$inet6(r2, &(0x7f0000007a80)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0xffff, @empty, 0xd68}, 0x1c, &(0x7f0000002740)=[{&(0x7f0000000300)="6408d756ba1c79f1bc8195113b343e6b365d560e7707e37dc1b57070b3281773da610bb065d1f56dc10a0570af794c5023787380f9ffde91cc6b866976f4382fbe264f4c2cc9750cf91da52dafc390e691e3d1", 0x53}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="5c03ef08991938fadd5f1a44dcfe3046029ad9c3b6db23d43885b58155bfa1a2ff531c91457079e841b64b7fa3937b95ebc1fa67a6a9538ff84f5e237452a58a699c643c84de3c91189dbe516b51b50bc5780bf9fdde2ea421e66b3fb3f4fffb79c746dbec7f", 0x66}, {&(0x7f0000001400)="4b009988991c94019bc6ec2d4f243aecb0f7373400389491425b9f26542e4acd288edabfad30935419a694c01a600be6ad3bc070be5420d560b429b90593385744dd15312ba0c2a45fb9702c98f15ab0a214ed156d5aeb7ac0f14bb59671e2d251227a5f81466a88a569718dae3dbd81b9739fc447b6ed4ce70b2de2df13bbb09ee269aed987624b7a316453adbb69f13bbe47be21dbe2bbdeb640bb7795a40be620f1c34852f3a340bd4865e26592a9a4ca98ecb87893edf86808c7bed0a10624f8e7eb035a6440f11aa78de4c98528b05c1471f4e7d86e8bb292dca33bc23d5a730a71431c", 0xe6}, {&(0x7f0000001500)="689805c364febd0498417b0d7f2c9f5e6c77d55793e8708492f911f9c847afc295e930aaa1aa42e4a446502ffee039d61fe525904eaf419848dcf9048050cf6fdc7b2983db634c", 0x47}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="81db35172e9a8520d8abaac1387a2e70354fef8e0985c5464700cf65e28964542a4d0617f9cdd7437165eea78f2fc887e0eeceda4acf61cb48c2d0c9ae6b58b4faa798edae5d90d581ef2c7abaf9685f0503dd4dcc471930a87103ec942a8402246791d2c9b5cb6140259b6fb342fb56700e8d78ba0e0abd343b17923f113c3f4a2694dda76610820735f128f6be2e479c72468e150ebc9e8a", 0x99}, {&(0x7f0000002640)="3092e75b0f7114b0e0e4a87f8070bfd5dabc75a985829ceb74e4e15ffbdf56b56ecbeea918327a1681871de23da71e9df4634b290d06105d12e9e28bb5114fa12493d58446376f81af80d3a43278c9019f4546699c9c2ef96120c3b3ce651ddd3f7ab26c6916e4e18e4f5f94ea8efe752e0b44a8d90a8207b85763ac862df9a4ae8b74e22ce4aad52aff5aad2f66eba6437dbf94ee72b2c9540ec966cb815927fdc1a25bdccbd4692626cdacae6f0608ce7a69bfc81926d56cc4600fa16f7bf3bbebba1d2842be28c1", 0xc9}], 0x8, &(0x7f00000027c0)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x9}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x827a}}], 0x38}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002800)="35c8997dbdb07cc6f1ec2881e809fab7788fea67308458bbfd0c161089b3d47e8392feac9d837a1d0cebe70ff3dbf0c0d4a5f1c260d0d89040b73d5ea949877e3948ae1b5c5172a77d41d606af35d84e7fb1980f81950a2744a30e2095b5bee599e78d425b3ab327b0ab7ba2a8bb3cc8dd3a245589a88547e96d494dc4ccc881a9181408fb371ab9af4df7502639053bd778e0ed72986f3c386a8df0dec15524896709d46a41739a54a9d08c00089288069a4316d90c8f7071e4fe9fe818ad689e5c676abb15137f6ce38c", 0xcb}], 0x1, &(0x7f0000002940)=[@rthdr={{0x88, 0x29, 0x39, {0x88, 0xe, 0x2, 0x2, 0x0, [@private2, @mcast1, @private1, @remote, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x5e, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7ff}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x8, 0xc0, "e91fb1d375f67476158c90214acaab2f540e8666b2376fe9345b6dc3898a715202866b474482b294ceb8d6ff3847526c4f976905e68e7d1551d6cab5f5e6c21a16b786331e02d256bc08fc4cfba8a42bccc11c7d584292d6b219cfeda9c2e3a4d6f9685a22a5e2f3d24669b3f58df97303db8ecf287b3ca16858b41cbd5e95c22b1ab70d319cb5b7fde4d2b3367349948a7c9014bfe87e54d238781438876de74851d59010b72a673b8446a6cabe201a382033f0bee796f82657b4b8b80e0060"}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x0, 0x2, 0xe6, 0x8, [0x2]}}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x3a, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x81, [0xffff, 0x3, 0x6, 0x1, 0x7fff, 0x64d]}}, @hao={0xc9, 0x10, @private1}]}}}], 0x238}}, {{&(0x7f0000002b80)={0xa, 0x4e23, 0x6, @loopback, 0x8}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000002bc0)="bf840bc7d2c5101dcc5e5af10e10661e4b8d4345e04ef29f6f73834034125c0991867fdff95441ae47de29693f5285b2a3daa4929a844474ae8aa8115f048c3c59c5a2fca4a956c475820b11fe81ebd640a733ce566d17573641fbb140bd4b6cbbca6c9ac4b5a4cf3da441c03a8b260f0f00554f5ddcf690cd99bffd5904ef340406efbfdec71c5253dae23db537bc322c938b3098fb73f84eb50b8ff4e01e06421aa66cf3813edede010999b0cae2d51c5d1d873fdee040f3df93d2ae5495cb840e48e7fe9948d579e79757c452c0e83ce8ed1a", 0xd4}, {&(0x7f0000002cc0)="abc26d6a85b002b19ea3c60ce7450f70eaad8a4e1179bea1ffb62814666a6c9317edc89dd83e2d721263a1a4269e7ae8aefdcf9ef5f9ce8877e38a9a10f2368b8f9e12d2b636ea8bf6c033f31965a037125042e979b4aa28e99ab3d14a8b29a95035ad9161d82886e12066632e03ed86cadff6ce2bc4f4d3441358fdea4e11f8ee2d7a699a8e14d3c2a1f69c1a907084cfde695ffd84967a536908c5143fef8265ecbbfc8352113d40dffcaa173202b3eff828bb65e04dd7369eb8fc", 0xbc}, {&(0x7f0000002d80)="caf7e022025d7a569f15e64950eac65a278daf5be7a745abdd03d8f65119b5880bbb6ff3c1f217059d1b4d3096a4f52627321683ef4bfc169019112bd8070719d2690869a67eedbc78179df5a0fb1b1d0e", 0x51}, {&(0x7f0000002e00)="d45ac5f4efa7bba8b0b9bbe27ad79f9d6a8cf345477616a324dc6e9fd00239db785384f20418bded38d3b35edf51d971073375123447a65c7bd6e2c94ac0162827c17d3a8f20ad38871d50940291adf4d14a2b47498035539709d66ccf04b41fcdd6a1f3cbe56483ab432ee09e1b96f83313c1e2c892c81e20cfaf5e2fc54c876b77abf5331e4fe43c7c68830ff34361a99410e0a00cdae8e8bf68809ec94415243bd6d8c4e01b838f459c7676617aa13a1b696d8930fb40b4a1261015407aec3301df652de0bc1a17a758deb25dcfab0d2765901899cd449115ce5a57495fb0b4fc7d3e15ac1b", 0xe7}, {&(0x7f0000002f00)="81ebb7f4ccd5814950eb4b942001eab7ce246b2544eba75cb6aaefa5ab292639f68f155ceb8977c93be4fb32c16115a33bfac159d9a9361a57d61a63d4342a63bb4fe0c3e1cdad27a71abd882606d4366dfc33583970c9cb8535fa712f937638069e750c2e80aed7c42ed833e6ba1fcc2cc07faf1cfb064a08cd47ffa949ba01756983bdcd51f80c0413052f8608aa49bd178f9beb34ed2de24a59ac1d622f13063aeeced71f3ea26236ebf45142fda11da0955f362cdb5e3f39ca3abfab3373e811d0d376d677fd645cb9e4477eb193332240565848cdff103cb19c89f82a03b21ffe43bbe387c216b228ced75834a817dcae90c72fa991bedfe481a19358d00450c043045b34070dbb7ff4a9c5bab1f634dbaf1d883a62962722e94d1c7fa408991c4c48474921b256bfd5eefb13ec931e1cc5b8d331bc7518e8d328127bca2b46b5314d9a9b4e1ff4f167946ad91f8ae281f647d118aa3e3833cfb3ff0ddc4f40653bc2dfefb788fe4d9766d08e925515d4f3f403db73ccb3d594db9773dbafa7971f4d8688fa8f50435ea3cd2628a0466bbd9846a47dfe082bc31dbfdb5da79d68680df268623f1691ff09983911dc50fa04f6ffe1bbdcf257982cd8604d351f314254077706a688b9ff8e56b409dfb71685f344ac18f030421d68f2c2e074d13ed64e8b5b8ee1d8cf7abba9c8d961e1e44bcb275b32b749d078b313d59c2b27d0f1f270c3b9725eebbe6a8952c150a31a045929970adfd19c9a78380a57276c96555158a4a4cf20571d2901bda5b41ed996397c482887e0367cef06a26bcb467bec71c6fb964d8db1b617b9274a25828f15e20196198c34a10d0a145f5b0b41d74eccc81b699589cd54d09eb6dc00bb65a9276a3ba56277a4f8c18c0985216b72bf7c6bcc1658c7e697f5f03aaed6710071c983a1dfd0aab31892ce31e277800a4d8b456e4c97bc9052c9f2f54959dbf6a2d8d7bded983a87c1937fd140b0515d2985a5d6a5eab5253e524ca58c0eb4cf4d3e5a517fd4ed88624949582a736374e4d6eb51b12cf65fc926123c7ff8036d290b3cb83dd93b85ecddebbdcf144fafbc6a09c9bd69a33e22bab0b4f23dc187061dcdcf03f33d99ab699efd3ad3217790dad026fb6799b6e3192acb3e7968c3ef9d1f57b4e081bde11654046fc5b361957ac03e5edbafaf0ed524aeba4879d6421c1a58b975320f5349708a2c9be5c694701708a4d40c294ad3c5c5558fe7f1f4d7072ab190b8731a705042be751d07aef1708ceefb214d92f4d4799da33e312b92ad28412e409b0faa71bb66f58ca24e0b64d1c0d4c21248826cedbbc4f977511fa3efac85ca8b4351d7cf4589bf17b881c88e46ece6d1ee92211227558545522c6019a359c04901d5c6285533a5d41cd4c654e1d0174b2c307071f971df200d2a7b6850b958b97d880170e41c606b7b1b739ef8546a3b8e8517fd991f0e54a6bb4bc5a5b0c03b6afb1afeea126e04db0d94d4758bac3d28021ea7dcf2e9a66ad587e9162baab71ed6db0a3f0fb83f117af9ae398daffc798bde2d6651a9fe2dbcd5f2f6a8ac276221abc1d9e2196bc8b3dfd4cb1861f17adc9c31dad0b5ea1fbd0822e87670a6a183de1dedc2263d424c7cabfad2e8d59c1b2df5f7dd4fb3402a399813cf329e3d99974045e31f2aa2f18d4376cfe0f6b3c9d2bbe1e985a18550a27e5ef575cf1d5ce2c7f9fc9c4844193a0d8536521e5ce207b3d000ee693e22bd6ef0bd90df927b9ca63392c845c1bdf977716b3f583ff21075fec634179d9f75a6258b842fdefa6153e97a7b2cab5398c8ff0c4aaa826f7e4ac9bf12034452d9613732dc2bce0e5657adeb7d38d94b92f1b05bd5fe8eb7a1a70c9fe2bc42365f14a863140f86715a481b4067cd7d562639150c8b73dd31125a03427de14b4d33378775139cd96448ad42b50165683785925c99e6cee213d69dfe9a691f889682e2c708b10d5a18d9d705fc4746c5f0e30389822c54c0cb4e1c97568515db62a4318c7b8fc9ebf1209dbaaa3fe42d01699874c37e407361475288bfba6146bd4a47b9a8de333f2353fe56c7af19129c5947536a1fc0a2e2223757e0ed91204c44eb9d3da96c8fac25c629ed079d5aaeafac69120a23d367f5394a71c4f3d86fe63ba6b1064e02b0ae766b8a6982220271367ae79dccb24be81d17e3f1cc4b4f43454dca988efc593fc3d488d6cb840ce0204d1d04cbbef0207dad3330cf643a64354a70a4d7d355dff6dab273fe90088b40e5c0ae4040f7e254bafa6075f8f9bf77f26dc609fcdfa1f77764aef8fdbeec2c8bf1b0a221f161e1cd510aa720b4fc2b431cd551cafd11c0b06d9f452d1d6bf86e7345d90f79c0b6c9eea2b21b4dd9fa2f343a4b2a9bd68e2b4f969690d410ddbe3c770854ca1f86ef64a86ca102f45f4120ebe1621e222134a22a83152691155f1b995810dc552dcf0cb2cfd61abe42bec411c04380ff0ff97d1d30dd9cf83ebe85134687bda21ca479a048c79447c27b9cb147bc6ba73a1d699c67e565b35c0a86a8ba18d46c8f5ff02ceed3c580cf2cefb6ba289412e11ab42b36e6855cc97b9fe9f570040d0fc3c3f115ee427bd1dddefc97465a9753107678f28d5eb1d6a18ac9e4c9e3cbdebc0fc9109e06afb0cc69f08d3aa24accce35260cc891c1bf843d1849797a2a6bb68a67f24ad720235e681d7fb077490fcd4b89e3f3b2a6ad86181b64086ba51d5f9229e17c8d32145b8383cc4a6ac2dbf631bc1f094286ee06baa7187d3df6d9d1a931e1e4c30c9752d2d8516d9c78613cf0ca11a3279550f927efcef438bc21bb9ec1b21a9709581d1128f471eab35a2a165278bfba1d48c4eb18d18b929c96667f92f99282cd84ba4d4ffe37a85b5dc6e35ece49302cbb86fadd24a903bd30f9d8cae2242fad6c05e9bae8dd6bd3c3570f093e8a2c0dd33a4bb0599d4acc6ac208454b822b71fa06240c79a295cb36fccb604bc39deee5e4e801d0fe3c93e1c5d46a506174995888a8d9cb94775a36692592eb120f3c29986935a3d822bf62afc002725c0bd60f8a1dcb14a3b83dfef38d55ebff2bf76e416233db6fd1f5f742fe1bee1d58e8f01e2befefb9e8617fcfd290baea07cd17d40ac3c3c32dbe7cd557a6b519c8ba795ccdc3a3f71e346d3d7fa12ea0d0f098890374fa43ce7e46b24698ebc5a053d86ccf79b9cc06f86d8e5ae4efd0859078cc62ea376d31a07c49ccc86ec599b44d7cfe36426d6220c8e6fc1623cda3608cc13256a3c9562e4ac26f4fffd03d906edc72dc3f43cc24f1d2235be009b5440d889f42cac43399a3cf09dee058486ecb974b0bf3d99d5ac6e7e03823e87a6a307f1a6b943645b16fb09c1427e00a6069819530be3ba677b14a613c4fb614d1a4df3062f1a00107b926951465b193df69194e245e38eb04d916dbf6e8f8b9d451af73123b18b0c701c1e5a2432e7bfcd54c3ef97a350625056dbbf0a84ccf2e8a7be70fb9d284c61e8f98e32fc199b89a80c497fe650efa8cb1fc646e46da883eb674163c1e2289ebf7a472eb06c0f44e00a68324728cde4c913b298b9e6c4dd9f187338125712358ffb83c607c0299ecfb4f2e35a22f0c97ae06ecd2b14c88bb072417b47f633bf17117ddfae6da3ab25e9a84c34041b86a3b8c81f227668e8a95cb40d17700ede09094d67577130d621eb094b3b4778ec3b922819e9a769133b6b01d97857634c1457ad9cba5b6ff247dce19a33c91a278520e6b5e580cc6e7645eb9d9c1f9d671891544607f6381d68d99193f5c74c45ec930d39e91be6719b4c9a8c2a90455c7e25c2779136ab3db76bbecb5d1e3e7c3cc213166e01c60e0bd4d0ef8b6c9e8eadad70b521de527b63255b3a4302dba2f432184f63ffdc25004b66870212570a94cb36ec07a1cea125b8288b9f55b207d784c907216fe2e35b03382f2f66783214aac2947e3865c6b04e176ec6986f1f32b907326684a196df6bf13f26260ace1ee55bb059a6bc6e488cbc80ed2b3d0787013467ecad672c3b6d394c792be876ab0d37747937a3ffa590f850cd7706d7c3b7484a7fb088bd9c508e801e454f4d78f829147374ec30d32edf38bfaa53f1abd5c9da76f0542c057d472e2f96adb65e8a20e3b9be87aa259409efda5e6eba995e5f54d15c4700976cf63dd73f5179467a7102ce7008aff65c0bd815f04cb3da71b7f0ff37d9a33f5e24f23fa83529760e04911714186e175ee0b4a9e2d7a334b1726c267ee8907e7944754a538e7e1c5578636891e66dc9f2814a05b26ff8785439c677a4e6e99856ebda16abc5ce2631b90beed13d37b73aaadb7f91b6df0dc3b5575171211d853139a497130a5808b0ebf34c021e49a328ebd79005ded5ddd52c401e022aa7d599e08e6305c9ec81de3fe4c3fbe25726a39f80654710b19a5da5e15b3e05330828d90aa7efac96d3477d500a994f48729f43e8a31f0eba3dd7c544393c009cb3149a173ee3597b1329b568481a9b8a15bdb98b224b1d517f1699435a22a73106e9a1116fe93c77b3d6b5b6d6023268fba0a83185401b8d1b7e846aaa2783340af835842f894c511b881e624c5f3a218020e858bb49dfba5a6cb3ea11e3728ea402fc7cd43759e04488f77a626e9c517a000d4a4c96a96b01198f618f5f1381ba547ebbda5b1ede1e3acbcafd12d2ae55472248e84517f2904958170da4df391c881a26480e10548c8e88d725b3fc9432e07b7cb762c60e8a11004fe328372e9509bfedf9f70063a114c133e1eca3406ffe158fd4151da1715ad55154a6df4d6a6ec2cee6ed79255c6cf22429c104c5811f97afa316feef4fda79e3e4bc302ea463de6a1ebddd2daf89982efaf5aa49197f9577426bfae08c47819215bf36d6f74f0a32b71ac1c85ea68b028afe124cc1ff4a7e8866b0f02f0c2125676ecfdec98a20c676c49d8485348307df96686652da20e52e837af826d5628552a08b4f9ec74f17ef59002e447b407da8999da812ade2d6db42e1e33ea3edd8d6a97f33be604de4799e0fefe5821c5de187ff09ddb62c94ac170ee94fc62bcb02d6c611fc7a3951f12d7e9e00a4da6f3b1602f697fd4cc4192fb15515fefaaf461e546b0d8755b5d035e0d254028468e1d995f1111653b5a059ef88c7eadb38d8d8c63ba74bc83c2b99e343d33a56c42281ee8678054a32609dcc86f901c453954ade8a06cac42eb2bd6ef7902bddb5f5f305e357904b6e7fed93bb02dbc9b621159d7fd309fdf88d0c588ccebc2c558e08165d7a96df7f79c7cc6c160487d63080312a75ab09e25e34fd8437ac5c2bceb6a7327e0d62c3d5858ecb6c5a88bc33d0331b7aecf15fc887fe8e11ec4dbaaffe3aa0fd585271630caa7f44ddce9a904fdaa491b3cf42b007ba95c9f46ac3eb19126ad45691c334952b2b6e79ecc67564bc0a02134a5c2df8781a716e38782a3cf84632e4c2e4abc0d7c8fac48eec52ada4b6f9847a20fb631005de1d795d0dd26fce7b1ac1924c79a0e1ebe37403b7f55b40459fc23e10bf280db393a5c85bbb771b72d994b071439c738d2b51646901cafb1e923b824080f2491571d8fa0781df016a72478b9188bbf918907bc0ee2d119aed078e4555805134cfc40fbb92d465fd6df889d21daaadd9d7941d80fc6d4570cc3d65b65cf2fd28c91838b1a73555b24a0d4abd094d144d6eb19030e80ee55ba64c777181b2a33e45047973a1ee295c8b106433cbc3688ad5937e5369d6c521fff79b098c24d50915cfe04988b29caca3dc2247b960f7e991f", 0x1000}], 0x5, &(0x7f0000003f80)=[@tclass={{0x14, 0x29, 0x43, 0x3}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2e, 0xa, 0x0, 0xff, 0x0, [@mcast1, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x1, 0x4, 0x8c, 0x400, [0x9fb1, 0x0]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dstopts={{0x88, 0x29, 0x37, {0x3a, 0xd, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x10, {0x3, 0x2, 0x20, 0x78, [0x6]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x1, 0x41, "e32b140cd2e9f4509192f9b0ce88469001d493634b57bf0ee81143e584002eaf3cd86067fc6541989e63a9d6bcdfc75cf5c7d0e2c0d6a7844b4694c778633ede23"}]}}}], 0x198}}, {{&(0x7f0000004140)={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}, 0x1c, &(0x7f00000042c0)=[{&(0x7f0000004180)="f6714c15880fb1dada610d9b9dd0247adce808cb6f53f95fe16f888c9ed65e947c8f29e269d860ae8adb59c9ff945fbd592c0e0ee26f28b3d8e8389535679ff5fe36fcef82b3409f2c5d2875094e77b242f1b5d2e732043149fc16918e7ea74d08c23d06b77c7f040deb6ca57a1113c40de4266cd3a29d60c5788e5a757f0685890e746b5b8dc61a733ed3a2", 0x8c}, {&(0x7f0000004240)="7629c51c7b217b425b15d3f01681a67f75a527481626446f38fa0b152f5b46", 0x1f}, {&(0x7f0000004280)="eddedc742bcacc56368940b8482f6ddf6a5f918746bac6592c141ddd6126fc188c05756629f681387635fcb8739dec489cd8626615d54e", 0x37}], 0x3, &(0x7f0000004300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @hopopts={{0xf8, 0x29, 0x36, {0x2c, 0x1b, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0x3a, [0x477, 0x80000000, 0x81, 0x8000000, 0x2000000000000000]}}, @padn, @ra={0x5, 0x2, 0x3460}, @generic={0x0, 0x65, "0096e845968fc960980f86a5e8546618a697f9494014103ea3c5e9523fd38c3ad6bd87c4508151b7ce6b27c50f4dcdf91e913f60a2bd7b9620d3b949566854434b9bdeb476c2a0dc997703e624e6572650aee9345e1ed07a3eeb9dd9fe687ce52a7f03f2e0"}, @jumbo={0xc2, 0x4, 0xfffffc01}, @calipso={0x7, 0x38, {0x1, 0xc, 0xbb, 0x5, [0x100000001, 0x5, 0x5, 0x101, 0x1f, 0x1000]}}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x87}}}, @dontfrag={{0x14}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x158}}, {{&(0x7f0000004480)={0xa, 0x4e23, 0x2, @loopback, 0x1082}, 0x1c, &(0x7f0000004680)=[{&(0x7f00000044c0)="f1c85e23995c7277a6f1246238485d06d7e76f6ece4d9ed91a4abe76f145bb3158bf9253b8fc54012556da068bc62fce9ab11857d48186023076ef1451ef59ee1d242fd6f414982d4809ffe8f05ec78ae9e4e05d8af3ad8158f2eeeaa0b0618722634e6822df88", 0x67}, {&(0x7f0000004540)="e0332756f8c69c6de14a894873a838026c06717a9cb8ddb625ad6f59a9c1249e7578c5d20d384dc3dc565d4c9e6be79ebefdd76661a628751abed6df51eb25e53e61fdd7a7ca3e20b2", 0x49}, {&(0x7f00000045c0)="5fe48c2e9192debaf9419735b0bb449688127b01512f38463a9d261e772d009aa8a4e972733f7242c5c602c28211a17ddfce9e1846c0cb833f7e9a4af6a5c7b6dada42839fc9b0f95ad8e355abd9eff868da83d764f3bff966a4b020363d8ef9eef9be61b87e8e4d663a68fde488fbd3c2040310cbf6ed264273a4f5abdbf0915eba17faa42bdbe6fb875c8ef7bbc8dbfc8ba608188cb929df4db9dd7335895dd2790ec4be471748", 0xa8}], 0x3}}, {{&(0x7f00000046c0)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1d0}, 0x1c, &(0x7f0000004980)=[{&(0x7f0000004700)="92eddf359d89f661aab1cb6bb7fb80231c2643589f3f51edfe0e884b78f58cb3dc82ee5695de80f7dc62c2c1b8a07ab4aff17b5da4a26c769d0ccd259db6170c19d02b100801a107c4b266970350a9eb79fb57224bffd51bddeba73b2c5e847e45c8dceace07c3baecb12b101bc32f7ea7ac90a470c0dbb61807d60744b7e32b5960fef4c58967c876ed1e76807cc392b41bf52ed1ccccec981cd3e7a07e9653135c7ad75699538a9527a16220094650d945eba7f698efad085f1fe91a0df4a49518a0a48f7222e69f88565883130afe9011482f32092243", 0xd8}, {&(0x7f0000004800)="a690d01618010c92fbd5796b3326f690744ed1bf0960841657a489df556f18999ba76b18dce7157069a0dfee185de70a53e5678c382f676f6637cd00e676fca12559d41faffa113adc85e74951d6ef6d50d662d96d1166769bd8eed16fe27d122448db03c81dd1d00455bdeb4daac463c6eb3a23f857a3199fb941040e0e362d0350e007cf99e95401e46f9d4a94a2beb474792260d4a2157a56b6a581b8c4188cb743384a3d7d8ce28f95a6191816df7dd1", 0xb2}, {&(0x7f00000048c0)="c52a085ed852b7f85b55a718b717b2734df8b27e414dcd1d1cd1620d84c69c0e8114f6237c3f0cc7c90869662923ccc9617ac3cb7694b1366dd4e35e67b457eb495ccf7b7fd2f5c1b05082b1306668b6d77f09b109b5e086365182184b41f14c568f0680f593da23b2b543f6afb7cea3925b58d85ca79aab4c5c3edb0e4c61c3b8d8a6cf24b7d9924439cd06da42f684f4f8426cf1", 0x95}], 0x3, &(0x7f00000049c0)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x16, 0x4, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xa253}, @enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @empty}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000004a00)="603c32718a9c92144791cedb31a10b12b6e637d8b628b0a3afbfdaa1e4fed00423f6dd41f441355d9b591dee36a9002dfee3c2f8ab59d6ae82e37a85d12c32f8e83cb9db3185fb0c4326e53b7c34e88ff166f03b115f7a597cabc1edaa6861032b6ea51bfd7d1669aa09c30d8f6c08", 0x6f}, {&(0x7f0000004a80)="5dfec52a3ffaf979f519852a59a27375f21e338b514bca3d43db27164be0b04b47509504e79a6baecec6022df4f81dd1cdaedb7ed6a279a209382297e29504a8d1675c1a481e704a54186400f507a7e87e034f714c55a30b6b4659e803f0f6dc587d3541469e791a9b91501ae54187953c277475142068a026d6b650892cb39f777e4487c1c8d3fe29628638e77ab4144b23d66f10c455105d5c9a92946d5675ad9c12698aab722f9c22c1992d44411d569d0f84289619ac61fffbb91e80fe3531bac7dc8a86338ac66dc498836d3f65595dd1992a45", 0xd6}, {&(0x7f0000004b80)="9fcdac30fa15ba0dbd30ee7149b60889ac27b757e1e7957f8ff452648868b3d8c43d8b70319d14c3a6ff6d1b61fe4dc77781088e691983ebd7547cd0c1b2bd9181d0c862a3dff102d5adc9316a63e01dc1adaaeee0a6da54a529e7bcdff6c156e67e1adf684615834cef294bf4be4a0517bde933f016189ff5e39c260fe879b4ba4288ccbe6922ac4979e42382c377eec9ae0d40ee3a53abd4fc0736084ec99d4cc2b7829b18069fee312a569b56b9223f21f841d68243a6f774d862e57b89421f113d078a0c0f6d247f7d09bc10b24f386be7f358262f1b7cc0ca431df0acfca2fd0490b2383a60c28fed5a410a4ad1e1730e6bb165", 0xf6}], 0x3}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000004cc0)="1f21c12d9535ec13a30a973f8d407f220953f31c1b5f1b9037472b975ac303b9db85e4bb4d33c90ec81e6d36b8a4f513484255bdc20d8f94277a56b8e735cbb6ba1b3bfd2181368d4ddc7c96312a2b53a42d4362ae02c04be099cd345aa9d57590491c99f5953ae04796166605a341388bb7ae014fe01e0ad7ec3081ca0692f6fd82579483c52e14c67416652023961f88dd92", 0x93}, {&(0x7f0000004d80)}, {&(0x7f0000004dc0)="5c40e0d4ca2fedbf065316e0f9eef03a82a340d8e3a2a2b61d90a079b6afa06de6b57b6c07cccf3e60f245d6038d467f53ab0211", 0x34}, {&(0x7f0000004e00)="2fcfa1a7200745af738b13bc96cbd3acc77cf8a8216fd8e9347eac50be0768bc388b3e4dbce24517477561d537a40ec2e130208832fc3a1f50dc00e9c6d1245b92498347667dafa027ef2d6dae9e05d53366af8eaeb0cd7205e5e43d01e46f76e877a7a5547b770b2c1ebb7dbae13b0fbfa9425076e08e8ec958341e9472bbfe4181890096a5ef75f2a7394e2f5b70bc539bcc110fdffdd505ed56fd22cbf38b7d1af544514d772275c6260bb86a2ba9eb637cec8cbf11bb1f9b9230efe5689144c4fad89d112f4898b24c6ae1f0e449dc1a", 0xd2}, {&(0x7f0000004f00)}, {&(0x7f0000004f40)="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", 0x1000}, {&(0x7f0000005f40)="4624774e9d4f7d88d77c6533a584945088c175c26d4f2eac08d1f0ded9ce14954c9b2534b525f4efac35f2fc452c7d65ea6134b3264130d965240dde2a5d47138366b02547a089871a9f614794d36912ac24a815f6b3f22f9af4858b63b7d56441d13df30c9e7741cc8541a7d3d65b74a55e9093a4c138ea4e7f3d0091ad9e152956db10e3efa2b10f0fcf4459582269f30e1c7a917bf602843b9bf139eda9af333cba79e2acb17c9eaf7b819a213a84eece95d9091c10d2de9a31667a33789d70f2f9fd73ffa6f8c4308ff3914ae06d0fde6f26ff2ed011e292701b1d3b26e7d803268c", 0xe4}, {&(0x7f0000006040)="14203a74a5a6f8734e4d344f2b401337471479581b849e922409725540ef725d34f76f387591f606ec927e55d45e1f2764d453d3b95b0d03d1a7e685f419131f3cb2052a92ef7b6bb729a22030ef8cc37a26f227f21c1e28304eedfb1cc6199c2214bc25a7ba6ab896de73c1fd8ab68200aae3120a12c45df782ce461853912e72b382bdbb103bb8f7c81b9c281afda1f30ef46c8ac6edac3538fbcddb2cd6543fbf656d2daf6ea1b24740dfc82a289f9905414caa431661e38ebb282c9f65ed1197e516", 0xc4}], 0x8, &(0x7f00000061c0)}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000006200)="b3e42b16b7dbd34154386c698e72c30ff83e9473265cf4f6f0303308bbd97ac1f7de4f90eb98191eda7e", 0x2a}], 0x1, &(0x7f00000063c0)=[@rthdrdstopts={{0xa0, 0x29, 0x37, {0xeb, 0x11, '\x00', [@jumbo, @jumbo, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x81}, @generic={0x0, 0x41, "45bf8fdf8196ad148faf18a7a2232182709e304f4bd2696c61b1d50fee78eb934c7de6fc941bd1491ace2de8e1d3b513314efeba56c25f4c073f5a7d0f16b88ea7"}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x2f, 0xe, 0x2, 0x4, 0x0, [@local, @empty, @mcast2, @empty, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0, r5}}}, @rthdr={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0x2, 0x0, [@mcast1, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}], 0x1a0}}, {{0x0, 0x0, &(0x7f00000079c0)=[{&(0x7f0000006580)="11c71e0668d03029e3f2635d85a48f465c5f96e95eb19a8f5ea0bbdd7276fde85c419ec623811afee5bb368c25c12ba467c157ab3dca6638023a3926b8990f18d40e0b3a5e4846a033b1974730b8514cc61a0b9130bcad4996617a52a67447403e853212b445562873feb68576f9672d9892060dafeed8a4cf521b47c919f5bfec659e77127ca4a8c64e6709fd892671875852d40a44a64fc59d215664ac191ee17d102a207e736c13ad50c871", 0xad}, {&(0x7f0000006640)="bccb3eecaac788bef03d6e365012f6ddfaa8b21d40de1189133f51f30ed0de74a083918a750db97fc3768974fe02438d6099daf5f0ddeab55a9c4b709ba5daa4acdc4e5023b00e04480ac3d881b567f30c1d7e347645691e34ed08834a94c3e4e60d94f9323e256fe84860910cf345428d9c3e5f14875033", 0x78}, {&(0x7f00000066c0)="662089d7e0771769ca65886e2c95cbd12eb304813c73d0fd815e22f57df0de0d7a7bf10578a747d11b329ddcbac790a58d3861eb5a08a095cd890e0b3e352e7b982d24de7ac28a163836b0a6d6c30fea8a086b2deccacaed24c26b5263617571941c5e0035354db9caade1d2ba0ea605ece2acdf4e831b150fdb5b15d73924b14bbd37dac0e1cd3228b1360fe0b17e070d09b78521583d62ec003a77a06592608fb9c0b1272c467a1b8aa18fe79801b83c875a4dc571349e63d390dbe767a54a3e872f514248b75b3941f81c443269b204ff42bac05ea46d02b8a5ee4648ec6b5a62a7866d85fa6ed0828631b6", 0xed}, {&(0x7f00000067c0)="ba3a8ee7597b54bc88168feedfd3b58cf81c04756b5b850264c7c937096bfb28cee3cdb2e5e9aee888aaf71df631b13d4bddb047831e7f2c444a8848ee1aea61b5912b9e1740c54d39ec63c6c0ad2aed2a31c8a848b99f89f47e239e6adff00ced0f2a0d3abc61503ab950af8c91f99b0f4b330f94ae21752bee29a4559d9b9b292e2b77d44341881712f382066ba5ee36a534f9a6698ead45cb89a5ab38b47657c00478184514dfe76d075e83df68047d0671e41eb35e4b11dbd9de46f381d929a9ae7f9d8ccbbd8c982e4a5536ff0ab5c6adcbd51ec309a8a77adfa084", 0xde}, {&(0x7f00000068c0)="eaa14d32bf58e27bb8b56430f2823224ca91bb778b9d9018ca4063de83b623bb6d588481153717aeae940f45f69928ec8a180387dc0cde3296d00eb1555c2a8afa5f92d604357bf341b27e91a6b66cc374be725ec138fe0c38b8fb6500f589bf0045a354a19db4a389b4a67ddb236dab4955108524d4bf807811d2af090dbcfa1e770a35e4f8fe9e7cce56330acc562c76e70b8452262cb5c3287d445763274f14cc708365aba3d44ee4a79533ab", 0xae}, {&(0x7f0000006980)="34a41e1c145cbbb4efad499611332697908e0146ff5c3654d7c8da", 0x1b}, {&(0x7f00000069c0)="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", 0x1000}], 0x7, &(0x7f0000007a40)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0xa, 0x20000800) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) 16:49:03 executing program 2: ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) 16:49:03 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100), 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:03 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:03 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6101, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:03 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) 16:49:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x10b5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:03 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2535.008902] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2535.022464] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:49:03 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) pread64(r1, &(0x7f00000000c0)=""/249, 0xf9, 0x200) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2535.039016] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.042382] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2535.045131] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2535.046984] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.051099] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2535.055849] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2535.063072] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.067227] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2535.085081] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2535.087012] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2535.088607] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:04 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_enter(r1, 0x78ee, 0x39d8, 0x1, &(0x7f0000000080)={[0x7f]}, 0x8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/bluetooth', 0x26903, 0x18b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000700)={{r4}, "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"}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x32e, 0x0, 0x1000}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0x2, 0x7, 0x3f, 0x8001, 0xf}}) sendmsg$inet6(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r3, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) write$bt_hci(r2, 0x0, 0xfdef) [ 2535.096257] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2535.108429] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2535.110284] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:04 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:04 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:04 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x10000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x81) [ 2535.190005] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2535.199209] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2535.207129] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.210218] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:49:04 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x10b6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x34000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:04 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x25, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:04 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x101200, 0xeb) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2535.287063] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2535.311030] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2535.329488] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.332341] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2535.336100] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2535.337964] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2535.343925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 16:49:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x10b7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:19 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x62803, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = getpgrp(0x0) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x4, 0x7, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc68f, 0x0, @perf_bp, 0x1750, 0x1, 0x390572d4, 0x1, 0x5, 0x4, 0xcc, 0x0, 0xacfe, 0x0, 0x8}, r1, 0x6, r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 16:49:19 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:19 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{0x0}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x80000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:19 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x2f, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:19 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:19 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 2550.867375] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2550.873212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15010 comm=syz-executor.0 [ 2550.880921] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2550.893912] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2550.897820] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2550.901208] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2550.904463] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2550.909874] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2550.912407] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2550.914352] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2550.925689] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2550.934059] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2550.940427] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2550.943974] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2550.945890] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2550.947451] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create(0x7f) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000380)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000003c0)=r4) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x260, 0x1d, 0x8, 0x70bd2b, 0x25dfdbfd, {0x20}, [@generic="508aa75bbe73d40a175a577dd9f4109d12ee016a9a51a80e28f7f06065efdf4673034de39ea12af8508ec7bf65ec322ff4d417", @nested={0xc9, 0x67, 0x0, 0x1, [@typed={0x10, 0x33, 0x0, 0x0, @str='[])$#&(/!}/\x00'}, @generic="87d0a0a62faa524a21e08a0349035fed10f263a37088cf0b98093a5ecf42371899e53b9b6d8b87fc7ce74a8e732efe48e9ae1fc25b4c1e7f678b6f29f9fde87e2196430390b67b532048c231bc85dcfc031f7d", @generic="db0b5537d895318fad3d03352222be2054c0a66f009bb7fc0a3d423ba307bd7c109a64fd64ba6e8792816f1c3dcedd7854d32cf3e9b607b10d304457a86bf463dc3db4e09b58882a09331ee5b937984f4fcad654523633f0c8bb", @typed={0x6, 0x1c, 0x0, 0x0, @str='\'\x00'}]}, @nested={0x18, 0x56, 0x0, 0x1, [@typed={0xc, 0x25, 0x0, 0x0, @u64=0xc6da}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r1}]}, @generic="d1c4708cb863f5ef9ac1cc0872fbfd9937fcf681c16f19bea27f79410895ba25d225a65b52af1309acc3d423729dc9f699f414b534e3ca5b09a8fb851baf1bfc290887fa8b7212462925b25b67342ffe058ed0689d2652e00d1b753bd342a4927c12ad86ebea9e149b4d8313587a95bf7793d21a1b139cdf7688a01b09d65b2d7d6c1ea239aaf80247b68a", @nested={0xc, 0x7b, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @pid=r2}]}, @generic="e995f69990902b386f636711c1c5cc2ccd098782c07290bac464b0bdae09164df87782dabfa1b8054d8820c78145225f1ebac0c5e27cb643a1c86983483a6cbd2e3b73a48808854493ae35c1271a2f8d3a17", @nested={0x4b, 0x6b, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @pid}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x101}, @generic="57fae93b032e48da988d65b74a1b5b840f8f98e1278ed9f3852e161719c1c9dfa7679718733458298fe81f11abe2302e39486e19e15838"]}]}, 0x260}, 0x1, 0x0, 0x0, 0x8800}, 0xc1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r5, 0x0, 0xfdef) 16:49:19 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYBLOB="021fb8d07171b93adcc581bd6600f5d4483da26da2efaaddfc9078a6249861fcb69e140d4a0c5d9c6e2f64a3dbdbf6ad3534dea164571b0275cd664531b8c86709460b0432c853e7887e22e7eb12b30779ca6f34d8e99783a44e9a5861b0f7b1f301828105769c8de3f2c4", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="c2a52caf5bbda4d20a1cf89fcb68785307beeb0ea51de0f2db"], 0xfdef) 16:49:19 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x34, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x400300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:20 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7400, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2551.109277] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2551.139331] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2551.141150] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:20 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long}, 0x14) write$bt_hci(r0, 0x0, 0xfdef) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0xffffffffffffff99, 0x2, 0xfffffffffffffffd}) [ 2551.147425] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2551.154181] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2551.165408] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2551.187994] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2551.193769] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2551.196921] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2551.200775] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2551.203088] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2551.204641] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2551.208229] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2551.218545] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2551.233463] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:43 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2574.523410] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2574.525354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15058 comm=syz-executor.0 16:49:43 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x35, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff]) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/70, 0x46, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000280)='./mnt\x00', 0x20, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e53a9222cb49418afd33d756e69782c726f6f74636f6e746578743d73797374656d5f752c736d61636b6673726f6f743d7072656665722c26736d616769633d30ea4c3030303030303030303030303030342c7569643c", @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000500)=""/102, 0x66, 0x20, &(0x7f00000007c0)=@nl=@kern={0x10, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001380)=""/213, 0xd5}, {&(0x7f0000000600)=""/209, 0xd1}, {&(0x7f00000001c0)=""/89, 0x59}], 0x3, 0x5545, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_class_of_dev={{0xc24, 0x3}, {"90f5b7"}}}, 0x7) 16:49:43 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{0x0}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2574.530922] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2574.534530] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.544253] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2574.551246] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2574.553391] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.558022] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2574.569364] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2574.573196] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:43 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x52, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8100, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2574.599733] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2574.608942] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2574.610816] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.617305] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2574.623163] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2574.628740] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.634822] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2574.642347] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2574.647512] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:43 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000180)={0x3, 0x0, 0x1}) syz_io_uring_complete(r1) syz_io_uring_setup(0x663f, &(0x7f0000000000)={0x0, 0x981b, 0x8, 0x0, 0x2bb}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0xa, 0x3, 0x0, 0x4}, 0x2) epoll_create(0x8000) 16:49:43 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x53, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2574.687493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=15078 comm=syz-executor.0 16:49:43 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2574.753960] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2574.775082] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2574.776979] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.782791] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2574.784448] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2574.786347] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.788475] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2574.792054] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2574.800541] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.804413] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2574.806404] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2574.807486] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2574.825027] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2588.554947] validate_nla: 1 callbacks suppressed [ 2588.554959] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:49:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x73, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:57 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{0x0}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:49:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000040), &(0x7f00000000c0)={'U+', 0x9}, 0x16, 0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x132, 0x400000086, 0xe17a}) sendfile(r1, r3, 0x0, 0x6) write$bt_hci(r0, 0x0, 0xfdef) fallocate(r3, 0x4, 0xb1, 0x5cc8) 16:49:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x1000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x34000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 1: r0 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x86013b21ecc799c1, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xe5, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x99, 0xf0}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x8f, 0x8}}]}}}]}}]}}, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x2a, &(0x7f00000000c0)={0x5, 0xf, 0x2a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x47, 0x8, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x26, 0x81, 0x4}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0xcd, 0x5, 0x40}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3009}}]}) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="401a9b0000009b0de3829745f7a88da5c014e75b785e53706275beea70387354bacdaa382f287ad13f66c3ccbf86f5faeea8c485a16916c088066caa09c7b01d59a7b5df49dd25d6dd0ed8a8022b5c635133b3f00d96946e36823d2298bae1b5640391af9d49c8acb16b0441b07b81593b4fae22f40a4730678bf7e50bacdeb86addaaababa8b8117ece4072ca099848e8cef875ff69b00a220304f3673b95ff10"], &(0x7f0000000240)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "15c010b012058b26b5554020cff8b3c4d1f3f2f6569467d150d8e3cf91c88f61a13745682254c919f3932f476ed914251a11b3047ae99f956232dfef213379bce7fb0c8dfbb27a241a956afb779046886ec5a0678dce30748d897bba68ddf372ec0206dae26a5f64b939ef241a4e496792f6774572c01af9e017b7e83c46ac237c70a600934511a187c606"}}}, &(0x7f0000000540)={0x34, &(0x7f0000000340)={0x40, 0x7, 0x96, "4c1811ca2ae49240e46808a9210a38c4b0b18ffa94f48c8e687d3e24f8e6178b54ac5a61a946d90747b274b8ea0396f606ea7a69af6128925f8ea244006a33bb1fcc6ad9bda761d850edc3f98ac740b56f3106bfbc855033dd7da55cfe6d36534673a4fdec1f7cc0792d53c4c716798371b91c0f6301f840439e09f74a32400e05b3f67ee7eb6b2f2a64ed2d5c02996037564e101288"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000480)={0x20, 0x0, 0x6, {0x4, "a02be633"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0xff}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x20}}) r1 = syz_usb_connect(0x0, 0xa8b, &(0x7f0000000bc0)={{0x12, 0x1, 0x110, 0xe6, 0x65, 0x1e, 0x10, 0x1bc7, 0x1040, 0xa61c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa79, 0x4, 0x7, 0x1, 0x90, 0x1, [{{0x9, 0x4, 0x2, 0xfa, 0xc, 0x85, 0x60, 0xc7, 0x0, [], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x0, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x81, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0x9}]}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0x7, 0x4, 0x7f}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x6, 0x2, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x20}]}}, {{0x9, 0x5, 0xc, 0x11, 0x40, 0xc1, 0x6, 0x0, [@generic={0xaf, 0x23, "1629557d0fb09d1f30f3a5f6d87bc78a1bb1ea7623ba5731b9509b6b9ae99b1576a0455ed4fe02b8b0c03cd1337f139654c677fbe83ec62551989cec20950d0548398c5b44e6364c762b11e7bf02224494ead15b15286abe5de2e1b318222a5969514724b64749554199263fd9175ba7dfd69c79b547832d6b0576e2965ca8ae398ba350a52f551e7bd4b44c8e7622c079f54a4d54803c38da46a26c99137f4aa9549a01db492402f8c269ec6c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}]}}, {{0x9, 0x5, 0xb, 0x1, 0x400, 0x1f, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x3, 0x448, 0xf7, 0xf0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x3}, @generic={0x99, 0x6, "71ab725a45e6fce8257c3449d2f4a98093ba4d4dc4faf0255f32b10a0793525efa6ca3436d54906b606843f100d2e7b5b872dbdd0dcefe29fc956a6a2c78f3cfc31c82025658fbd0712e62713749f0ffb31f3be9b0874311d687615ed87026425b7fc2387c9f4b6a9359645443d995e58e9105e4d7893812e34c17c80c21c436e7a0066a3a8ab7ffaad4aa8a62f7cd409c5b4b6d39f278"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x80, 0x1, 0x6}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x1, 0x53, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xe}, @generic={0xc5, 0x8, "c9413e79fee89ab504446f7a8f2744ca2300366adbc3da884f52d33553bc4fc51d795cc32bbb894a437603103aa08173c8cc55c72b5af0a5f5b8a4f0d6a1f0f5688b73bd61cbe1c859ecbd6c1e5af03a6143a8407dea7407f82511b02d89c1c9cd0b21e40676546499beaf8afcc297c333925783bd9621f7be20ba6670bc2bf65174d8e79a2ec81e6028bebf84890f5dff880e4309cbd272618063f4755c8db55ea2852227aaeda26f23813cce67799950b668585e95a724ba4d813b1bc7863383f9d2"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0xc1, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x54}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x53a}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2, 0xff, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7c, 0x8000}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xff, 0x40, 0xfc}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x7f, 0x1f, 0x76}}]}}, {{0x9, 0x4, 0xe1, 0x7, 0x9, 0x1a, 0xa1, 0x15, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x5, 0x5, 0x40}]}, @uac_as], [{{0x9, 0x5, 0xa, 0x2, 0x400, 0xb, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x2, 0x2, 0x1f}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8, 0x81, [@generic={0x9c, 0x10, "4de15f9bfe8e2b30b17efeff94ea5a05f9ed6e186f024656ea04b1cb7cbadeaf08829c1db5013ba1f0d42d5089ad2da7d56f241844ca844361888cb2ac211f1476b6256edc84f886e05c010b06172ca4e9766ba13c6d208e10106fcf2f1c090388c7b7ce68a86ae0bd5981d56292ea9a4642ad5454be33b8f9c87b2c46fadb6ba9bc276d8d0b0e8c99fa2aaa7e9503826255aa18fd6ac9459a41"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x800}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x94, 0x6, 0x7}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xfe, 0x1, 0x58, [@generic={0x79, 0x30, "c276944e3f32ee57f655f7d3d7841c0cd749d4790503eac33dd7ed9d471eed8202a0f778d69499e7a8a3540af787a8dadf30ec5487c75da1d84cdef0efd99e5c5e155edab9a3f8d2d558de6a406bb70a26ec39aff06766ac828fea87e66f829bb25f89c536c1f3372d9bc9e3e24c3c7efee86ab391d3f4"}]}}, {{0x9, 0x5, 0x83, 0x8, 0x8, 0x20, 0x1, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x1, 0x8, 0x2, [@generic={0xa, 0x3, "2b82e7148e3a5465"}, @generic={0xdb, 0x10, "e7e3c3a2c024be2b00f2d11906d877ce02729acddc59925c4c0c270249bb63391af970a735242376e6413bcc79e6ee6fb4c7deaeb0446ee2ba12da132a8d2e15640b222573c01876663c5ccda2b3514b77a13bf3b7e233951f7ca84b1d4dea76c74d9383efac94d48adc755b3024ecbf019bbcdbda0eb236a069e05efeb7fa9625d5c3e52d1f4947c4796ba43e48c647811d16b798ed819a464ae4ca2fae62509c9e103acc51ee4a7ba248639a559155697907318b2aa0a86897c236aca2a0ada8412671a581f6d5d26b983a938b66c256b602d6a00c0666c4"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x81, 0x9c, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x50, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x2580}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x1f, 0x80, 0x3f, [@generic={0xf2, 0x4, "243074466f9dbaeab75019af22efa7dd522467d3e2a8bc4f9d6289d9943a2b8d6d8adfca7e88233fbf2ba9e6bbb030c811ac8affd9373ed128cbefa9124d56ae4f8df9ad480139f6931b3d7f6f8e01859e341e6534a51bf02192bf217864175705a4a79597e2a6311f37d02a10c13c2ddd335968e0cfe789b6074350662f7e78f98b12829229afa7e20e825cffa13f0ef5adde9d72583cbf66f0891ac0ac657c73fde99b5090de8d1aff5ee8152172fdb77ca15b22f3c1134fa2e11085e67e6286436e2eae0a317dfffad1e5fe47f16af856e3b3a15497781b3cbddacfc00d25cd7391bcbaa32c9968a09dfeeb6fed9a"}]}}]}}, {{0x9, 0x4, 0xa4, 0x7d, 0x1, 0xb9, 0x28, 0x85, 0x20, [], [{{0x9, 0x5, 0xb, 0x10, 0x8, 0x2, 0x18, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x8e4}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x8}]}}]}}, {{0x9, 0x4, 0x7f, 0x20, 0x8, 0xff, 0x3, 0x3b, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x401}, [@extension_unit={0xa, 0x24, 0x8, 0x6, 0x0, 0x5, "9ece4e"}, @extension_unit={0xd, 0x24, 0x8, 0x5, 0x4, 0x4, "b0d4544a6f0e"}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x0, 0x4, "d3"}]}, @generic={0xfd, 0x22, "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"}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x3f, 0x0, 0x6}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0xdd, 0x39}}, {{0x9, 0x5, 0xd, 0x3, 0x10, 0x0, 0xb, 0x40, [@generic={0xaf, 0x22, "a071cdf0039a98eb3afe014d5b6f37bd37496bd408bb42c867d34129e7fee184aed69f732ad549622795d49a8de987bc31fcef422c57e946a468d840e7936b7bbe73a78f9ea8b318c0de7c23aa35956140e0f72f98c28ef4f301209c24991fe3d0fc2413861d595f42a8380dda410a7c297a9732f328e712a24ce68e1c9c9a6b11ded452b69c9f139706d68cb4fd0c96e8cb442bc0950f1302609aa2d0101407efe76893eb2ce87d8a909a0e05"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7f, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x1, 0x9, 0x24, [@generic={0x22, 0x10, "fd3dc3638ecffd62d0e3ba25051889ac9325f32034902359669d4baa2f487986"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x404, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x29903ace509a5d07, 0x0, 0xf5, 0x5, [@generic={0xcc, 0x9, "a645e8cf099f44aa850b34476ce2b00cae667571727892e5987d5527afc70cc9592f577d7b6f768a14f91171157b68c408e6854a9ed56bb531f57c77e2cc8af0628280b4635e15d0d51a3253512cb3eaf4d5c99b0fe157828fee1d78affca91afad52e1c70d47ae8cf384410d3c634457d75c5ef3e98409486ba9560e9e9fd2c6e5c3206c3a144a91ca96ae7a00f6941505de893f633d554bcfc32d264ec8afacb026df0bde7b7b6d73d1739e5d029db3b77f2ac3020dd09494f3b1fdecb67f73fa652bd16eb9d9631c6"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x65}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x8, 0x2, 0xde, [@generic={0xf3, 0x5, "fdf0603aaa0d4260b63f8fbc39db094541f2e87140b95044ac83c5f2c8b3e8a023b43e041e248a397161bb288abc1007ecc189c7190b6f6278abb01dab91f94b65e91b6da2a3fe1714ee3fcfbe825ef604879576a89c760061b66436cfedbd3e92bf468c663a23795d591ca21a8546e5745f2696c42c84d6db8272085525dab61bad1061f1d8bc23d02e94c0d7ed1ba4c63459530f5ae98d4513740bf1cf1261a78f5573e14172af19954bf692ad792cb2b0f037ef1ba94e2b289a587ca616f3def986af7c172545bfb751b566847a3e028fdfc6252b759687ca4e20855bec842d4c69cb33d986e3ba59e4de2b9da4cfcc"}]}}]}}]}}]}}, &(0x7f0000001800)={0xa, &(0x7f0000001680)={0xa, 0x6, 0x300, 0x20, 0x81, 0x40, 0x8, 0x6}, 0x6e, &(0x7f00000016c0)={0x5, 0xf, 0x6e, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x6fe, 0x0, 0xfffe, [0xffc030, 0xffc030, 0xc0, 0xff, 0xc000, 0xffc0]}, @ssp_cap={0x20, 0x10, 0xa, 0x1f, 0x5, 0x3, 0x0, 0x3, [0x3fc0, 0xc000, 0xc0, 0xff3f00, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x5, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x8, 0x659}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "edad03c1a824e16181f46fdca54a8594"}]}, 0x3, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000001780)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x1805}}]}) syz_usb_control_io$hid(r1, &(0x7f00000019c0)={0x24, &(0x7f0000001840)={0x60, 0x30, 0x27, {0x27, 0x31, "86bbb01fcf8d8da44b60b35f8a52c27e2bfd53dc8a183e6bcd03390063e97ed1c86ad0af80"}}, &(0x7f0000001880)={0x0, 0x3, 0x8b, @string={0x8b, 0x3, "3f75181cf288d96fd6fffedd585f9594688e019b7c929bbe5eaa2d6fd16fc79515b5195d15bb9b0ac02ba63cf64e5baacd49ec74cbf44d1ea33a2c9a7114906dc3d006f9f50a81b4af4eaa3827e7603a259fbaf348dc06b1d0407354b632273c2605d2f66dbd29fe163e3516c971ecad1e64bd44da4f8b06d3f2cc54693f38b226fc5ee32276d7089a"}}, &(0x7f0000001940)={0x0, 0x22, 0x19, {[@main, @local=@item_4={0x3, 0x2, 0x3, "66feb53c"}, @main=@item_012={0x0, 0x0, 0xc}, @local=@item_012={0x2, 0x2, 0x3, "0f59"}, @main=@item_012={0x1, 0x0, 0x5, 'j'}, @global=@item_4={0x3, 0x1, 0x5, "d8193a6a"}, @local=@item_012={0x2, 0x2, 0x5, "184f"}, @global=@item_4={0x3, 0x1, 0x7, "d33cf4dc"}]}}, &(0x7f0000001980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0xe1, 0x1, {0x22, 0xccc}}}}, &(0x7f0000001cc0)={0x2c, &(0x7f0000001a00)={0x0, 0xb, 0xbe, "b1c467e99c9d28b03b546238c503003ea78a4ef53e5a7438c754e34a0df053099ff8b04ed1fd9ffdafdbfdb36faaf12fd6dd3b8545a9758b945da5b7f73eddb476931c8eec926cddc917c5fa919115683fb02cb71578ef994588cf4bea161981d9d72a55d124b054adbb516b632e98af97885e72ceace3dd68d6bb5475344ef6afc3228bd036d24a50249ea82ec767ada1e857192fea728e1de2c27d99e2e8820a6507cef679870b2537f86e97465aafd255f43aa38bb9d39c6a46ff8c73"}, &(0x7f0000001b00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001b40)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001b80)={0x20, 0x1, 0xf4, "150663ba2d38d0d099c25e4b8455236231bb132a59053959dc680341e402e45865baca0ae639cb9cf44b1f5df8fb59e5f9885c1e846206b0a906df4de39fee17afa44ced4010849d1497d5535db6be81b31f0d3417f2409e0dd3c3191662750b442f93b7361b1cd537a0609959ce7bda7ba0b06cf8f52136e8eaa4b1502e916614dcb254eb7b2381fbfadf649358954fefbf95ae829c7fab8ea4b3a29d8be7f5d7452816cd79b17cf2fa40228745b881d1d3db31fa73033b6fb4e462ccc6d52ae49ca0e8ea0aeb0b5b7204446d7aafe098a821f59e89416c117761144f7fa698f927b7212e79baa498ecc8691247f99e194d7c27"}, &(0x7f0000001c80)={0x20, 0x3, 0x1, 0x40}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22903, 0x0) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0xfdef) syz_usb_connect$cdc_ncm(0x6, 0x85, &(0x7f0000001d00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x9, 0x20, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "0167ebc1d70a"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x246, 0x1000, 0x7}, {0x6, 0x24, 0x1a, 0x5, 0x20}, [@obex={0x5, 0x24, 0x15, 0x9600}, @acm={0x4, 0x24, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x37, 0xb68}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x2, 0x1}}}}}}}]}}, &(0x7f0000002040)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x250, 0x7f, 0x0, 0x5, 0x8, 0x4}, 0x5, &(0x7f0000001e00)={0x5, 0xf, 0x5}, 0x4, [{0x18, &(0x7f0000001e40)=@string={0x18, 0x3, "76009d6af846a71ad57575924db0d6da9a8de057331a"}}, {0xfa, &(0x7f0000001e80)=@string={0xfa, 0x3, "248bbd57c56ee5e23d311dbe3c86457003974d7595e4e8cee62c77981985f5162a66114def0f61c05e0c8d23b945a28ee020f7d28da1f8535529e5855bcc1dc1fa8bb1dedc22a38033d7b768d5737ece7e390ead12cfdfde826036ca3fffa5b33b8f5d843e2bbde93a5ca294af2cbb189b6dca2cacbf25e2fa8b7aa1672867d654249c14d899ec263781decefca6f5cf25ee6fb3e12ac2252de3078aacf75bda0fb69ccb61d6e45f04c7a7700ff963b7c069922e73f38174aef1d93b2f0c52d06b4a6214a90cd87605636bb562b8ac2b188f92af1b389a599852c8891c23d44efb84de86dbea2c5f91d4b9f99dbc472f6d0542e8cb5b277c"}}, {0x2b, &(0x7f0000001f80)=@string={0x2b, 0x3, "5f8ef7466529e2d04e9dc8500b177c58b3a92dd7c12ca642cf5af03daf36612bb6362608acb843131f"}}, {0x7e, &(0x7f0000001fc0)=@string={0x7e, 0x3, "8be8992c8d0f511e327c68c905584ad4f635013e40a72e9c1e91c1144e040a5b641118a3b2cf8f2d95f2888d8a4ccd75957e7e0f68790a78d965f5437d3738b73e25724188ba23779eee8502be51261e799ff7b12b3d18063081745b7c2b159f4832b5f9b864743d747a8ed51cfc59b43786f90f287b17d306c2ef12"}}]}) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000580)={0x20, 0x2, 0x2, {0x2, 0x4}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0xfffffffffffffffe, &(0x7f0000000600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x60, 0xfc, 0x80, "cbabbed8", "290755cf"}}, &(0x7f0000000640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x60, 0x8, 0x3f, 0x81, 0x6}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000006c0)={0x20, 0x12}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x40, [0xf0f]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xfff8}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000880)={0x40, 0xb, 0x2, '=G'}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000000900)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000980)={0x40, 0x19, 0x2, "d610"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x9b}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x3}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) copy_file_range(r2, &(0x7f0000000b80)=0x4, r3, 0x0, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/pata_amd', 0x40, 0x110) [ 2588.569961] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2588.571940] net_ratelimit: 1 callbacks suppressed [ 2588.571952] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.582294] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2588.593276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=15110 comm=syz-executor.0 [ 2588.597052] udc-core: couldn't find an available UDC or it's busy [ 2588.598437] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2588.600360] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2588.611220] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.615159] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2588.619512] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2588.622087] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.626758] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2588.631938] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2588.633580] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) [ 2588.645303] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2588.657013] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2588.659850] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0xa6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:49:57 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x80000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2588.752501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=166 sclass=netlink_route_socket pid=15123 comm=syz-executor.0 [ 2588.816110] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2588.829954] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2588.838172] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.842326] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2588.846198] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2588.848957] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.853419] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:49:57 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2588.856111] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2588.858135] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.873496] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2588.881627] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2588.888353] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2588.891666] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2588.893506] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2588.896392] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:49:57 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"36a67157bcd95389"}}}, 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r2, 0x0) syz_io_uring_complete(r3) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x81800}, 0xcdfa) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r10, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r10, 0x0) setsockopt$sock_void(r9, 0x1, 0x24, 0x0, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x57}}}, 0xb) [ 2589.115285] udc-core: couldn't find an available UDC or it's busy [ 2589.116689] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2605.998544] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2606.008143] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:50:14 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x400300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:14 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:14 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:14 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6801, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:14 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:14 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0xff, 0xfffffe01, 0x4, 0x9, 0x9, 0x3ff, 0x7d7}, 0x1c) 16:50:14 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/pci_bus', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x40082, 0x0) pread64(r2, &(0x7f0000000280)=""/4148, 0x1059, 0x3f) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64], 0xfdef) syncfs(r0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x4200, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r3, 0x8, r4) r5 = dup3(r1, r3, 0x80000) write$bt_hci(r5, &(0x7f0000000140)={0x1, @write_local_name={{0xc13, 0xf8}, {"0e74dbe7504871818175321c0c0cc8f6713faac1652a1d02448ec1c20fe9902561c3d48f06b83f40956721c887f9bcd8fda3087e64f5e7699f40ff6b34785b2a3d03032c9106a8a97ae5b9614dc5e149dddf2c9ddb04f01d1762679be005e3b03adfe3b22f1b964742a4e77b7fe084a1ef47bb95e20a3915bcebea115021fec989a6b2077c10d62606d022989e7e7ca48eec213df6dd21ee8e7a02011b2e58d171c9dc44f0257744bad28aa57cdd0813ea917040627e1abd1eb1cb8d40af547ca6d1b3884cebcc7fdf2daeab07ad12e31e59e9640ab73162879e14eefefb5ad1e499b15e30feb7b3682a9e96c580e5bbaebf0a305fe2e6a2"}}}, 0xfc) [ 2606.019336] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.021884] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2606.037170] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2606.038974] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.042630] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:50:15 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/cpuidle_haltpoll', 0x2a902, 0x83) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1880}, 0x24000015) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:50:15 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x4, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2606.067090] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2606.076142] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.080231] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2606.085017] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2606.096885] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.101167] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2606.102245] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2606.103161] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.105488] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2606.113480] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:50:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f00000000c0)=""/4155, 0x103b, 0x1000) write$bt_hci(r1, &(0x7f0000000000)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) [ 2606.119759] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:15 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x5, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:15 executing program 1: ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq', 0xd22a2e02519f4a51, 0xa3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000780)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000369b12beb4c0d3502f66696c653000"]) ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000740)={0xdf, 0x1e, &(0x7f0000000340)="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"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/proc/key-users\x00'}, {0x20, '/proc/key-users\x00'}, {0x20, '.+--:./'}, {0x20, '/proc/key-users\x00'}], 0xa, "38070255b26c3dbe752ef85e46f9e8a89b239a8acbaec2d5aa57829fde13ed265fabcac130989b9565a7498344ec6e6114416d1df3c25a7f7239de356a9fef94897463e4f36fa9a328153ec1508090c2a20010411264782dbf8402a14ffe38b289745c5611f574c46a19276a3ca7749be775cf5e1b47c183866452b3a30ab2f4fef9a78098e36a4a28da79dcc3bcd862aeeb74de3494bc9f38fc169895007bb8dd13c21930774918b443fb7e1acd189818ab70aadaa040ce4974cdd66565d4456baef12f699a91"}, 0x10d) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r5, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) sendmsg$802154_dgram(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0x555d}}, 0x14, &(0x7f0000000040)={&(0x7f00000000c0)="7fe3da72507403cce70e8b7384e5c77a2b076f35234662eb2e2794cdaa956765bd0b0c0facc289d3f92ab2150e23da9a5f90810f2b7ca7c8ad3275768fd07f6022c58c0c917513e733f1397c62089061dfa386fe0e7430d77936172736dd67f707233762f4aa7b7aa6f9f56b6d2c90d31ef43435c4f07344d4d9b60eb039af6146bc4b3421ac2689fa6159b8c5b84960625baa52f10fc14aa22ca0f69229939c98bc7b26c7508b281fd43865e53d3dc313f5159b9ae4aa6d6c9a53e6cd044ef5ff4c8e916a42f5b09cfe3f438119e6a927fa0c505003f4269afcddb98de643e326b41fa4ede4b979979fa6122a91350f", 0xf0}, 0x1, 0x0, 0x0, 0x20000040}, 0x10000001) [ 2606.192917] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:50:15 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2606.202938] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2606.203891] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x28240, 0x0) [ 2606.227295] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2606.234793] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2606.235672] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.257552] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2606.277148] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2606.291449] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.295104] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2606.297783] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2606.299168] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2606.304018] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:50:31 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2622.097309] validate_nla: 1 callbacks suppressed [ 2622.097317] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2622.106796] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2622.116927] net_ratelimit: 1 callbacks suppressed [ 2622.116934] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.119808] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2622.121513] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2622.122818] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:31 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x22982, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:50:31 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:31 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/dma', 0x402, 0x140) write$bt_hci(r0, 0x0, 0xfdef) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0x8, 0x7f, 0x1, 0x0, 0x10000, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x5, 0x9}, 0x84, 0x10000, 0x8, 0x5, 0x7, 0x1, 0x7, 0x0, 0x6, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xb, r0, 0x3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) fallocate(r0, 0x18, 0x113, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) dup2(r2, r3) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) dup2(r0, r1) 16:50:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:31 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x8, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7400, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:31 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x1000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.136975] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2622.150368] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2622.160851] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.164729] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2622.165832] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2622.166747] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:31 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.198053] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:50:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.224060] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2622.225808] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.229800] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2622.234958] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2622.236823] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:31 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0x5, 0x9, 0xfff}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000140)=0x1000003) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) write$bt_hci(r0, 0x0, 0xfdef) [ 2622.256209] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:50:31 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x612c02, 0x0) 16:50:31 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.281314] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2622.283183] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.286727] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2622.289101] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2622.290493] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:31 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.332439] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:50:31 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2622.351349] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2622.358444] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.360256] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2622.362623] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2622.364118] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2622.395321] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:50:46 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x25, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:46 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) copy_file_range(r2, &(0x7f0000000140)=0xec, r3, 0x0, 0xfffffffffffffffe, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = io_uring_setup(0x15, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x17f, 0x0, r0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ftruncate(r5, 0x46e0) sendfile(r1, r4, 0x0, 0xc63) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:50:46 executing program 2: r0 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r3, 0x0, 0xfdef) 16:50:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8100, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2637.131838] validate_nla: 1 callbacks suppressed [ 2637.131852] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2637.135207] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2637.140229] net_ratelimit: 1 callbacks suppressed [ 2637.140237] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.144124] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2637.152059] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:50:46 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1302080, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none}], [{@euid_eq={'euid', 0x3d, r3}}]}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2637.162296] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.166099] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2637.167983] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2637.168932] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.171028] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2637.173490] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2637.176978] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.179317] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2637.180858] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:50:46 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001100)=""/4134, 0x1026, 0x1d) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000000)={0x4, 0x6, 0x9, 0xb3}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, 0x0, 0xfdef) [ 2637.190915] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xb510, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:46 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:50:46 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:50:46 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x30, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2637.275462] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:50:46 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendfile(r1, r0, &(0x7f00000000c0)=0x4, 0x4) write$bt_hci(r0, 0x0, 0xfdef) [ 2637.286383] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2637.287779] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.290876] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2637.296514] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2637.301506] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.306971] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2637.310748] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2637.311616] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="14000400766574ec255f746f5f626f6e640000000800050009"], 0x40}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2637.323445] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2637.329171] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2637.338714] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:50:46 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2637.355964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:50:46 executing program 2: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) 16:50:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xb610, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2637.414241] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2637.423829] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2637.427471] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2637.442589] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2637.454086] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:51:00 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:00 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x34, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2651.272502] validate_nla: 2 callbacks suppressed [ 2651.272515] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:51:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.283400] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2651.284804] net_ratelimit: 2 callbacks suppressed [ 2651.284811] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:00 executing program 2: ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) dup2(r0, r0) write$bt_hci(r0, 0x0, 0xfdef) 16:51:00 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000200)=0x2) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$cgroup_pressure(r0, &(0x7f0000000480)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000200)=0x2) readv(r7, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4088, 0xff8}], 0x1) io_submit(0x0, 0x8, &(0x7f00000006c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, &(0x7f00000000c0)="eebbede6129299ff40c1a97426f65fda96bc0eb8d3fc2a20c521692c256f6004cc848b2d4f903e0e78fce676fa06fd1695824db61fa5ece9b74e42441d8a527d9787e6127f200ec55f66b850efa8b3c1d7cc5d463eee631fe04c6be27993ed072ba8215da61d2d25715bfb2042d4562ed53ac78c654166fc36730b949761a6504e309a6f7a8303789f75564c17d3ad2110709f425bbec67cf18f7b58799378a0707b0aa4c637cb359bad2d946abea3a81ed0f7ab8c6e8746c4f8b9c5da87a160968c8bf571e6ab24ea799b1c2b9accb432130640b344d48c67685c", 0xdb, 0x5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)="8a74cc7daa4b77f4c4e96ac2406f70d2a09fae3da3d7b667f914efc269c48657f7ae80dee3c6597e322778c31e1ba1a82dd88486e595b845bd53e6547490ab8160e1b57822ed728335ca57c1b328bbdb03f8dfc0e2ec3dab39b9bdc5389449f1fee4ca535b9668ffb9cd1a7603a93aa5bd5a42c132c994e26c63636f25145e6c3a57c227f20958cacba4ff737e5614f0d19459c42ee330f67715b6ae74acdff51eb240afb1571c31762d7b40346e7ce233415758d55191420b9a96432a1aa748ef30840355de4d2c4a2a47dd20e29059cb647c85aa297b1b6d00c1a56d26", 0xde, 0x6, 0x0, 0x2, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xe06dd685f99f2820, 0x1, r2, &(0x7f0000000300)="10e198b941d34189b9fd66ba5cd7dc70dd2757a560ecb990813aa8857e33851c0e49be7001af22544665fe674160dcf36c512a00140d9c09", 0x38, 0x3, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x79, r0, &(0x7f0000000380)="e4a29bad4857a872308ac5811fdd3e6a60a8febcfe55c5d6e414eaff4b37792d297ec18d3c03dae3d0446f36f5e06a80219b1369b27fe00868ee348dc989d0f933a34a4e2459381b10019522e9275549e8177d66536eac4bcd26b867578e8ebd36fa41a9739ffa5199b1cdffbbb88f9cf64ac9f638f56d5834c3debad0f34475c938beff3e05d5ae7db05438f2", 0x8d, 0x400}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f00000004c0)="b097405c233a2482648ffebdfd2d45ee72f962202cf3aa1b43620e0205424e", 0x1f, 0x5, 0x0, 0x0, r4}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xb8, r0, &(0x7f0000000580)="3fb5", 0x2, 0x80000001, 0x0, 0x2, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000600)="29682178b25cf284729882f3b4572c0f96a991deed286d0e028e47", 0x1b, 0x2, 0x0, 0x2, r6}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0xad38, r7, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, r0}]) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 16:51:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xb710, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.293039] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2651.314533] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2651.316806] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2651.329876] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2651.333308] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2651.337112] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2651.339329] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2651.348174] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2651.355305] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:00 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/165, 0xa5}, {&(0x7f0000000280)=""/187, 0xbb}], 0x3, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}, 0x20) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x60, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 16:51:00 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x35, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.384481] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2651.391140] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:51:00 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r2, 0x0) syz_io_uring_complete(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:00 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.398915] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:00 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_default_phy={{0x2031, 0x3}, {0xd0, 0x80, 0x4}}}, 0x7) [ 2651.435885] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:51:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x40000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.454974] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2651.464407] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2651.468158] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2651.470172] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2651.472836] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40080) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) semget(0x3, 0x4, 0x409) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r3, 0x0, 0xfdef) 16:51:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:00 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.525975] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2651.539513] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2651.541471] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2651.545478] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2651.547920] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2651.549135] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:00 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net', 0x22902, 0x86) write$bt_hci(r0, 0x0, 0xfdef) [ 2651.565915] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:51:00 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x52, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2651.577532] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2651.582015] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2651.584442] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2651.592331] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 16:51:15 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:15 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r2, 0x0) syz_io_uring_complete(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:15 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x53, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:15 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x58fa41, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:51:15 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x34000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:15 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:15 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2666.354481] validate_nla: 2 callbacks suppressed [ 2666.354494] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:51:15 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5, 0xd1}}, './file0\x00'}) fsmount(r1, 0x0, 0x8) [ 2666.372536] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2666.383029] net_ratelimit: 2 callbacks suppressed [ 2666.383041] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2666.388230] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2666.391467] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2666.393971] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2666.398080] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2666.401012] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2666.404958] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2666.409287] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2666.413517] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2666.415448] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2666.432696] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2666.440904] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2666.448523] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2666.460490] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2666.469320] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2666.470922] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0xa6, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @private0, 0x20}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x4, 0xe, 0x0, 0x3, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x23}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x67}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x3b, 0xe, 0x1, 0x2, 0x0, [@remote, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @loopback, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts={{0x20, 0x29, 0x36, {0x3c, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80000001}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @dontfrag={{0x14}}], 0x1c0}, 0x8810) write$bt_hci(r0, 0x0, 0xfdef) 16:51:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x80000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r2, 0x0) syz_io_uring_complete(r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r3, r1, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x1, 0x4}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r6 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r7}}, 0x4) syz_io_uring_submit(r5, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r6, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x40000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x74}}, './file0\x00'}) openat(r3, &(0x7f0000000240)='./file0\x00', 0xb00, 0x101) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="0c06e9c428f52e598ec45fa85a5b51f7dda544a55b5d401b061eac1d36303b27f09741db97e32ac105301784d095bf491045a51d5f813cbb536a2b8bbab7255e8a46f1553a80666b00b694bfa8cb34003b9abbaed45bef3519cf37e46b825b0fb9bc7b44f52af1a1acf62249f85ddc624fcfc09bf1f642aebb0614e4cb784a4ee91483c4d9efff7ccbdd327c41f01bfb741aaf7cceeec45e24cc8562a8", 0x9d}], 0x1, 0x4, 0x0) write$bt_hci(r0, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES64=r0, @ANYRES32, @ANYRESOCT=r2, @ANYBLOB="ff27655fb7f708b09782fac8f1fd558a84609e36af3d64f4f074832e524c3a7b0b3e0c38289f00fcc4da86bd1e34028233cc70f9aa503960d622569d4acff197722c5640aeb5d7fb36f2f5c2935ce99332baf363db60702f869c7a3a88131dfd18fda435a5496b2e65e8fa4a2db33760c2a5ebe90485d7b8fd04c10f62afc5621ba550a1580e63e1eed9a52a8577b04bb76ee0300826f62b637539b96e36ea8c3bdcdfc26c1bc3d2af0c5edbd8fa639f81f7b8", @ANYBLOB="4c0dc867c7f6a342ae33e058f48ad53567b0e13f45326d76a9e26fe7ffcec491fde42643dd6062dfbd97f02dec58ef055a74f5473cb452c62d59ea0d26fd0a55e799978fcb2be6459e85780280ee9aca209ea556605a458b321ab94ae514466d0c420f64ea781b67b5110464aead83de43be7006c25eb12144820ee39e2574ca20341e2b7007769d9886ccfff49b048d070820c5c6ef6a7dd42c433fc18e4f8a8c0419abca3c04255340544193b758b57604d87f58c33f8ff7278ce6829ef4ee062f25988d1aa5c4bdb44557a61033ec38fa7c93bd249dc582aad66c0cb6e5d2911d9083d65b7b7a8cf874f640b743d4ce1a9dab3d7174f0", @ANYRESDEC=r4], 0xfdef) [ 2681.332332] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2681.334963] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2681.346841] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.366923] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2681.379005] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:51:30 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2681.387424] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.390922] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2681.393092] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2681.394993] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) [ 2681.416063] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2681.421326] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2681.422971] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.426577] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:51:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3cb, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2681.435334] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2681.437126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:30 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r3, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2681.463870] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:51:30 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000000c0)) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000040)={r4}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f00000014c0)=0xa91, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) [ 2681.475852] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2681.480891] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.484217] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:51:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x60000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x400300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x3d2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:30 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x200480c4) write$bt_hci(r0, 0x0, 0xfdef) [ 2681.591004] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2681.596126] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2681.598907] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.603394] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2681.615032] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2681.616826] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.620119] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2681.621317] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2681.622384] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2681.635035] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2681.636608] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:44 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, 0x0, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x68000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2695.870979] validate_nla: 1 callbacks suppressed [ 2695.870994] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2695.908422] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2695.910237] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2695.914507] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2695.916423] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2695.918126] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2695.924232] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:51:44 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r3, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:44 executing program 1: write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfdef) 16:51:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:44 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000000c0)=0x80) [ 2695.935303] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2695.942073] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2695.945968] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2695.949239] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:51:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x60000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:44 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x14400, 0x0, 0x14}, 0x18) ioctl$TIOCGPTPEER(r2, 0x5441, 0x80) close_range(r1, r1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x16, 0x1}, {0x5}, {0xc, 0x1}, {0x1}, {0x36}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x8014) dup3(r1, r0, 0x80000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) copy_file_range(r5, &(0x7f0000000040)=0x100000000, r1, &(0x7f00000000c0)=0x33a1, 0xf7, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2695.961934] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2695.965418] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2695.966503] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2695.967376] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2695.987120] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2695.996131] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2695.998036] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2696.002971] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2696.007820] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2696.010112] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2696.050289] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:51:45 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2696.063148] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2696.065184] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:45 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r3, 0x0) syz_io_uring_complete(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000200)=0x2) readv(r5, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r4, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x4}, 0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r7 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r8}}, 0x4) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r7, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:45 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@updsa={0x1f4, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {0x3}, 0x0, 0x0, 0xa}, [@algo_comp={0x103, 0x3, {{'lzs\x00'}, 0x5d8, "9669feb1ff02742f3e7bb16301000000661bd7a430987acd14f7b1235ad50ba18644f1caef6beef43cb5362a8b958eb89052a9af5ef36593cf732f61fa5035950e6df2656553fadefe87e4fbe90895d50f26fac268ea22071a70979a13571709ef5e4fa1a23fe9793ccc241bead81c67a283bb7aaee8a4c399b40884b1e8f769f07d0b8a4966fd49b2b9bdc636ca7a9f7f251bec8bcd8f1d8f7c09426ffc381d2cd7ac26fc2ee9031f7849c75b68eb98ee2cbeb1b959ac618865b9"}}]}, 0x1f4}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/172, &(0x7f0000000000)=0xac) [ 2696.099125] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2696.100261] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2696.101096] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:45 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000003ec0), 0x40, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04beb33645"], 0x5) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x3, @any, 0x3}, 0x40) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x101, @none, 0x7, 0x2}, 0xe) 16:51:45 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x61010000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2696.129014] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2696.144507] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2696.154013] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2696.159834] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:51:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x74000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2709.993997] validate_nla: 1 callbacks suppressed [ 2709.994005] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2710.000505] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2710.002144] net_ratelimit: 1 callbacks suppressed [ 2710.002151] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.005391] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2710.007543] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2710.009142] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:58 executing program 2: write$bt_hci(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x115, 0x1100) write$bt_hci(r0, &(0x7f0000000000)={0x1, @set_cpb={{0x441, 0xb}, {0xfd, 0x9, 0x8, 0x1, 0x5, 0x3f, 0xe0}}}, 0xf) 16:51:58 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x68000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:58 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r1, 0x0) syz_io_uring_complete(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x4}, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r6}}, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:51:58 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, 0x0, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2710.018009] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2710.032215] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2710.034848] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.038442] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2710.040032] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2710.041267] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.043387] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2710.053873] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2710.063503] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:59 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_seq_dummy', 0xaad00, 0x182) r1 = getpgrp(0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) kcmp$KCMP_EPOLL_TFD(r1, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000000)={r3, r4, 0x7}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:51:59 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2710.121342] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2710.131391] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2710.138128] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.140949] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:51:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x1000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2710.163518] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:51:59 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r1, 0x0) syz_io_uring_complete(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x4}, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r6}}, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2710.173529] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:51:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="03005bca99d7"]) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/70) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r2}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x8, 0x80000000, 0x0, 0x2, 0x5, 0x0, {0x0, r2}}, 0x8) write$bt_hci(r0, 0x0, 0xfdef) r3 = signalfd4(r0, &(0x7f0000000140)={[0x7ff]}, 0x8, 0x80000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0x400, 0x8000, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x66, 0x0, 0x6, 0x2f, 0x0, @empty, @empty, {[@ssrr={0x89, 0x17, 0x93, [@private=0xa010102, @private=0xa010102, @local, @loopback, @empty]}, @end, @timestamp_prespec={0x44, 0x2c, 0xb4, 0x3, 0x4, [{@remote, 0x80}, {@rand_addr=0x64010101, 0xffffffc0}, {@loopback, 0x1c9c0}, {@local, 0xb3}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x5}]}, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x0, [0x80, 0x0, 0x101]}]}}}}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) setsockopt$inet6_mreq(r3, 0x29, 0x16, &(0x7f0000000280)={@private2, r4}, 0x14) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) fsetxattr$trusted_overlay_origin(r6, &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x1) 16:51:59 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:59 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x74000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:51:59 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xc1, &(0x7f0000000040)=0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0xfdef) [ 2710.202159] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:51:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2710.222648] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2710.224430] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.228064] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2710.229433] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2710.230540] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.234111] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2710.245413] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2710.248195] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2710.252316] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2710.256296] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:51:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/slab_common', 0x20000, 0x40) 16:51:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x81000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2710.330829] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2710.335387] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 16:52:13 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, 0x0, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/188, 0xbc}], 0x1) write$bt_hci(r0, 0x0, 0xfdef) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100), 0x0) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x2) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x440040, 0x0) ppoll(&(0x7f00000001c0)=[{r3, 0xc101}, {r0, 0x10000}, {r4, 0x18}, {r0, 0x100}, {r2, 0x2}, {r5, 0x2}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x2d56]}, 0x8) 16:52:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x2000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2724.258533] validate_nla: 4 callbacks suppressed [ 2724.259376] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2724.266354] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="71782d25856f8e6fb3c9d2768a5a5e219456d89c60995d0885a041f6264abdd42c6339eead9eca15519f8775ada038fd2cef702f782a2a40bb0f930eeb4d91412d9fd1cfb5173992fc0b6a7cf0f8ba917c2cbd7399d5451872d2f67c59bc4de86c58a2dbe9c22cadb84d5a09631f521265efe5fd730e0887f185121a31ae5cb1f58eed5e004f5a5e7cbc311db3b0e7d9e50f26e60ec8fc90b770e8152e19523130c7248909fb8ca372f3b5d4030f26a1f21d9ca32a16ffe7f78890c9460f6505c6844ea7487c5fa13532cdbb335aa515658e256c0549ce0329dc1730", 0xdc}, {&(0x7f0000000000)="1ff43f27a73b2508f20cbf8c313946537b08b31f6502ccadb59dd0801aa8aa031de77aaddf38", 0x26}, {&(0x7f0000000040)="3437ba75030ecbb49ab729f2b19a32ea26b6ea7946eb0c9cd4f05147cbf8e5943f1895da95d7dcd84d3d146d28610d03", 0x30}, {&(0x7f00000011c0)="5d34ff4d2deb98c64b315cd26464bfd653b26c759c3b6ab543507fb33355830cd59ce41a5478bd0519cc1b4f1708f064acf2bf7eccd0eee4", 0x38}, {&(0x7f0000001200)="cfa1fc29f77629a73c26ea8b25049b391ca576b03358d9fd50f5bc0b9c90287ff923ba416ad61505b2a3f72d601bba1aa2be8963aa22d591aa26e55563ff07412126bfa66998b4ff9fc884928dc26ece39e3105060c9fc32f1d5e242dc7e97628ec2f147000cb21e0224055cbd02014ffd14fc7becddf84dfcfcbc51485eb5e233028ad5daf90a1e8864a5aab4092f8001bff84f4f56402d9929dde6233e028394b3ebf35c8387ea97e0d17fef130611f93a06578edb87ce369187e1ae6ad405348d48dd5a71e7433948f0b8dd946727051514629302", 0xd6}, {&(0x7f0000001300)="6a31369735bf5d1320af17af81a20c49e61568903ab3deee66fc27fa972ffb06aeaa505965b32924d4b749e78bf7af94aa2f09dd91e0e2eb2141839ea516", 0x3e}, {&(0x7f0000001340)="165abb9d2fc579d7b409be1fa56b3f7e958ddb51a76111f52f24be5bced0972fd0b4a0f9f00033149080df03df2279167f88314dc133efd9731aafccb8071205b76a8f00d177552a68226b917859e3e663cfa1ddcef2c00a7f2264b4bd99f7e7342b42cccafee0b484", 0x69}, {&(0x7f00000013c0)="f64b7e2cc3e0db52594186a6f63fa9dd0830bf7a81414ddf202e", 0x1a}, {&(0x7f0000001400)="88199566a5325fae2c8d6bba6224cae6b8af90dd2cfffc6ef6ebf45cd41423171e878d3baeee2bd1af89ea90dcf8414dd40f93b73abe41fb101edf6014dca3e5957d3cacdbc926", 0x47}], 0xa) r1 = openat$cgroup_procs(r0, &(0x7f0000001540)='tasks\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ppoll(&(0x7f0000001580)=[{r0, 0x1203}, {r1, 0x8}, {r0, 0x8}, {0xffffffffffffffff, 0x2}, {r0, 0x1024}, {r0, 0x4400}, {r2, 0x8}], 0x7, &(0x7f00000015c0)={0x0, 0x989680}, &(0x7f0000001600)={[0x2]}, 0x8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfdef) 16:52:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7a000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:13 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r1, 0x0) syz_io_uring_complete(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000200)=0x2) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x1, 0x4}, 0x8) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r5 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r6}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r6}}, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r5, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9effffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2724.283891] net_ratelimit: 4 callbacks suppressed [ 2724.283899] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.286828] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2724.288844] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2724.290314] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.293337] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2724.295345] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2724.296397] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.298527] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2724.313879] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:52:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x81000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2724.339040] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.342399] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2724.343574] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2724.344418] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.350401] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2724.362849] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2724.367961] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xc3ffffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:13 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2724.408211] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 16:52:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x3000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:13 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[@ANYBLOB="380100001a0001000000000000000000fc020000000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480003006c7a7300"/240], 0x138}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x100, 0x4) [ 2724.421736] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 2724.428428] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.430818] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2724.433204] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2724.434284] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.450148] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2724.452761] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 16:52:13 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9effffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2724.453634] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:13 executing program 3: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2724.468477] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2724.481082] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2724.484384] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2724.487541] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2724.501341] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2724.516171] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:29 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.425791] validate_nla: 3 callbacks suppressed [ 2740.425800] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:52:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000900)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000000c0)) dup(r0) write$bt_hci(r0, 0x0, 0xfdef) r2 = syz_open_pts(r0, 0x2) readv(r2, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/173, 0xad}, {&(0x7f0000000640)=""/80, 0x50}, {&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/122, 0x7a}, {&(0x7f00000007c0)=""/171, 0xab}], 0x7) write$bt_hci(r0, &(0x7f0000000000)={0x1, @create_logical_link={{0x438, 0x21}, {0xc8, {0x5, 0x2, 0x20, 0x1, 0x400, 0x8}, {0xa9, 0x0, 0x3, 0xd1c7, 0x5, 0x2}}}}, 0x25) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @host_buffer_size={{0xc33, 0x7}, {0x40, 0xaf, 0x7f, 0x7fff}}}, 0xb) 16:52:29 executing program 1: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x61010000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe2010000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xc3ffffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:29 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:29 executing program 3: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2740.452027] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2740.456909] net_ratelimit: 3 callbacks suppressed [ 2740.456917] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.460035] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2740.462325] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2740.464253] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.466870] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2740.468981] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2740.470128] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.473017] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 2740.477018] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 2740.486139] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.490361] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2740.503528] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2740.512155] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.515951] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2740.517441] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2740.519255] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.580524] netlink: 'syz-executor.7': attribute type 13 has an invalid length. 16:52:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xe90f0000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.587838] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2740.591716] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x5000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.611513] netlink: 'syz-executor.4': attribute type 13 has an invalid length. 16:52:29 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000200)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) signalfd4(r1, &(0x7f0000000000)={[0x3]}, 0x8, 0x0) write$bt_hci(r0, 0x0, 0xfdef) [ 2740.632838] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2740.634314] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:29 executing program 1: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:29 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.650090] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2740.660655] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2740.661690] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2740.669009] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:52:29 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfeffffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.681193] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2740.683073] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2740.716396] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2740.726997] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2740.735680] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2740.760443] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2740.774150] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:44 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:44 executing program 1: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x6000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 3: r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:44 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xea0f0000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.390122] validate_nla: 6 callbacks suppressed 16:52:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfffff000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) dup(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000200)=0x2) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0x4, 0x7, {0x3800000000000000, @struct={0x5}, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffe0, 0x8d27, 0x21, @usage=0x7, 0x4, 0x17d, [0x0, 0xd30d, 0xfffffffffffffffd, 0xe7, 0x80006, 0x7]}, {0x7, @usage=0x23f2, 0x0, 0x2, 0x2, 0x8, 0x0, 0x5, 0x4ea, @usage, 0x5, 0x4000, [0x7, 0x3ff, 0x7ff, 0x4, 0x0, 0xbd7]}, {0xffffffffffff0001, @struct={0x80, 0x6}, 0x0, 0x6, 0x6, 0x3f, 0x8eb, 0x7, 0xc, @usage=0x100000001, 0x6, 0x7b, [0x5, 0x6, 0x7fff, 0x8, 0x7, 0x2]}, {0x5, 0xd872, 0xef}}) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000002340)=""/4096) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r4, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000003340)=""/23) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000004c0)={r3, "cb93f63ec0dee4457637e7b5b42ba876"}) 16:52:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x7000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.390139] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2755.415318] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2755.416350] net_ratelimit: 5 callbacks suppressed [ 2755.416377] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.419285] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 2755.428079] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2755.437984] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.441793] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2755.444220] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2755.445835] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.448421] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2755.450819] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2755.452382] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.454654] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2755.456659] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2755.458195] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.461534] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 2755.464901] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 2755.467341] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.471333] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2755.472906] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2755.474252] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xffffff7f, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x9000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xeb0f0000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.547958] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2755.559029] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2755.560179] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.562513] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2755.567392] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x900, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.573009] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.579984] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2755.583289] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2755.584344] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2755.587910] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2755.596906] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2755.609807] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len 16:52:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf0ffffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:44 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.646177] mac80211_hwsim hwsim3 wlan1: refused to change device tx_queue_len [ 2755.673376] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2755.679890] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2755.682850] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:44 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xffffff9e, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2755.767371] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len 16:52:58 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) 16:52:58 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xf, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:58 executing program 2: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1e}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r1, &(0x7f00000000c0)='./mnt\x00', 0x9001) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x54, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x1, 0x1]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x5, 0x1]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1004400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1d}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044854}, 0x24000800) write$bt_hci(r0, 0x0, 0xfdef) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001e00)=""/4140, 0x102c, 0x3f) symlinkat(&(0x7f0000000280)='./mnt\x00', r3, &(0x7f0000000340)='./mnt\x00') 16:52:58 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2769.868839] validate_nla: 8 callbacks suppressed [ 2769.868851] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:52:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x40000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xffffe000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:58 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xffffffc3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x13, r4, 0x0) syz_io_uring_complete(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000200)=0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x1, 0x4}, 0x8) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r8 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x13b, 0x8}, 0x18) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0x8, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r9}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x8, 0x8, 0x0, 0x10000, 0x3, 0x0, {0x0, r9}}, 0x4) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd=r8, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x4, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0xffffffff) [ 2769.879165] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2769.880163] net_ratelimit: 8 callbacks suppressed [ 2769.880180] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2769.883954] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2769.903902] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2769.917473] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2769.920880] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2769.922267] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2769.923250] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2769.925322] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:52:58 executing program 2: ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2282000, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) fsync(0xffffffffffffffff) getpgrp(0x0) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$bt_hci(r0, 0x0, 0xfdef) r1 = pidfd_getfd(r0, r0, 0x0) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="01d2ccb84817d503534e5a3c03e69730519078b6f3e562066d54d9bb19f6becd272916a6e4ba55ae2f6063498b5a9043c57fca8a4686746620312ac7a8831b07ad294f521109f3c1b9fdac1d938c22087f4b10a4e72df023eb72c94342c1a9c0507d6118255a9946ff604664dcaf179dbac8f817b6160298007ceff9a22321c05d209473e3d5c7f89b8b9cb58358374bbfc27a7a73a365ce78cabbd4ad4ed864677f59eb41cb94486844"], 0x6) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='#\x96)\x00', &(0x7f0000000040)='./file0\x00', r1) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) [ 2769.927831] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2769.931471] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2769.934233] netlink: 'syz-executor.7': attribute type 13 has an invalid length. [ 2769.941306] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2769.947174] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2769.953030] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 2769.962437] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfffff000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2769.970364] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2770.009443] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:52:58 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2770.020940] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2770.021869] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2770.037408] netlink: 'syz-executor.5': attribute type 13 has an invalid length. 16:52:59 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x22902, 0x0) write$cgroup_pid(r0, &(0x7f0000000000)=0xffffffffffffffff, 0x12) write$bt_hci(r0, 0x0, 0xfdef) [ 2770.044517] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2770.045467] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 16:52:59 executing program 7: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xfffffff0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) 16:52:59 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x48000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2770.091846] netlink: 'syz-executor.0': attribute type 13 has an invalid length. 16:52:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0xffffff7f, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2770.107769] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len [ 2770.109004] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2770.145521] netlink: 'syz-executor.5': attribute type 13 has an invalid length. [ 2770.163389] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2770.165318] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 2770.171060] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len 16:52:59 executing program 0: setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x8142, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10a) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x108) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x4c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x8f, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) [ 2770.174741] mac80211_hwsim hwsim29 wlan1: refused to change device tx_queue_len [ 2770.187101] mac80211_hwsim hwsim33 wlan1: refused to change device tx_queue_len [ 2770.221186] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 2770.268492] mac80211_hwsim hwsim8 wlan1: refused to change device tx_queue_len VM DIAGNOSIS: 16:58:03 Registers: info registers vcpu 0 RAX=ffffffff83e5b500 RBX=0000000000000000 RCX=ffffffff83e435bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5bb08 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff856725c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5b50e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbe1cea7010 CR3=00000000182e6000 CR4=00350ef0 DR0=0000000020000080 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000006000000040000000000000000 XMM02=7a7a75662063657865090a0100010101 XMM03=650d0065676169727420636578650b00 XMM04=78650a00657a696d696e696d20636578 XMM05=7420636578650a0073746e6968206365 XMM06=0a006e6567206365786508006c61746f XMM07=636578650a006873616d732063657865 XMM08=6169727420636578650b007a7a756620 XMM09=7a696d696e696d20636578650d006567 XMM10=650a0073746e696820636578650a0065 XMM11=206365786508006c61746f7420636578 XMM12=006873616d7320636578650a006e6567 XMM13=6578651100736465657320636578650a XMM14=0e00737472617473657220726f747563 XMM15=00006574616469646e61632063657865 info registers vcpu 1 RAX=ffffffff83e5b500 RBX=0000000000000001 RCX=ffffffff83e435bc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e5bb08 RBP=ffffed100112e000 RSP=ffff88800897fe70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff856725c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e5b50e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce30000 CR3=00000000182e6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000042960095ea732800 XMM02=00000000000000003fde666666666666 XMM03=00000000000000003fde666666666666 XMM04=00000000000000003fdae2b63b0f7725 XMM05=000000c00b440540000000c0007692c0 XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd0000000000000 XMM08=00000000000000003f4d54e2e51f8000 XMM09=0000000000000000bfde57bbf4f3d6a6 XMM10=00000000000000003f999999999999a0 XMM11=7220726f747563657865110073746e69 XMM12=616320636578650e0073747261747365 XMM13=696d20636578650d006574616469646e XMM14=616d7320636578650a00657a696d696e XMM15=0000736465657320636578650a006873