FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.040461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.055085] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1336.103445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='gid_map\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) [ 1336.140285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.158993] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1336.166389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x804080, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 20:45:08 executing program 0: syz_io_uring_complete(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) [ 1336.195568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x804080, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1336.200671] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.222564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:08 executing program 6: prctl$PR_SET_MM_MAP(0x29, 0xe, &(0x7f0000000780)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) 20:45:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x804080, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:08 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001280)='gid_map\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1, 0x79, 0x0) [ 1336.428615] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.502794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.532728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.553463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.560478] wlan1: authenticate with 08:02:11:00:00:00 [ 1336.562271] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1336.583267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.601838] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:45:08 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x804080, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:08 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 20:45:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/4078, 0xfee}], 0x1) 20:45:08 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x804080, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:08 executing program 1: socketpair(0x8, 0x0, 0x0, &(0x7f0000000000)) 20:45:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x4}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0xf}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1336.672976] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1336.774960] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1336.879352] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1336.922489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.930417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1336.932223] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1336.947532] wlan1: authenticate with 08:02:11:00:00:00 [ 1336.949049] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 20:45:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x80000001) 20:45:09 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1336.991278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1336.996065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x60}, {0x6}]}) 20:45:09 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6c, 0x0, @dev, @remote, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1337.052402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.060278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.062795] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1337.084391] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:45:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x41, 0x0, 0x3373fa15, "418e0c7fc87a6de264a87f8a6347620ab7be94f72fd99e935ec14491d7891e36df86737c5de9794e44c1235e35e34cb3b0151cd71ed03e6288082e6286533f5e11"}) [ 1337.167164] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:09 executing program 7: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) [ 1337.271046] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:09 executing program 6: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) setgid(0xee00) [ 1337.375155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.380083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.401230] wlan1: authenticate with 08:02:11:00:00:00 [ 1337.402755] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1337.424035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.428124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.511817] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:09 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 20:45:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x80000001) 20:45:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2}, &(0x7f00000000c0)=0x20) 20:45:09 executing program 5: semget(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x0, 0x2, 0x210) semctl$IPC_RMID(r0, 0x0, 0x0) 20:45:09 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f47d5fe0f4655f100000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) 20:45:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0x300}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x5}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:09 executing program 6: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x2000) dup2(r0, r1) [ 1337.615702] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1337.634021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:09 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x80000001) [ 1337.691650] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 1337.697657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:09 executing program 5: semget(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x0, 0x2, 0x210) semctl$IPC_RMID(r0, 0x0, 0x0) [ 1337.719111] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:09 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0), 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 1337.750999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.754777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2c, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d2420100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37343139313330323700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040000c00000000000000daf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000daf4655fdaf4655fdaf4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000daf4655fddf4655fddf4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2100}, {&(0x7f0000011700)="20000000541597055415970500000000daf4655f00"/32, 0x20, 0x2180}, {&(0x7f0000011800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000030000000", 0x40, 0x2200}, {&(0x7f0000011900)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2280}, {&(0x7f0000011a00)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2300}, {&(0x7f0000011b00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2380}, {&(0x7f0000011c00)="c041000000400000daf4655fdaf4655fdaf4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2a00}, {&(0x7f0000011d00)="20000000000000000000000000000000daf4655f00"/32, 0x20, 0x2a80}, {&(0x7f0000011e00)="ed41000000080000ddf4655fddf4655fddf4655f00000000000002004000000000000800030000000af301000400000000000000000000000100000050000000000000000000000000000000000000000000000000000000000000000000000000000000eb7155bc00000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2b00}, {&(0x7f0000011f00)="ed8100001a040000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000af6989a500000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2c00}, {&(0x7f0000012000)="ffa1000026000000ddf4655fddf4655fddf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3734313931333032372f66696c65302f66696c653000000000000000000000000000000000000000000000725ed7c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x2d00}, {&(0x7f0000012100)="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", 0x1a0, 0x2e00}, {&(0x7f0000012300)="ed81000064000000ddf4655fddf4655fddf4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000003e5e55c600000000000000000000000000000000000000000000000020000000541597055415970554159705ddf4655f541597050000000000000000", 0xa0, 0x3000}, {&(0x7f0000012400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000012500)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000012600)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x18000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x18400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x18800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x18c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x19000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x19400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x20400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000800300"/96, 0x60, 0x21400}, {&(0x7f0000013900)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000013f00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000014000)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x48000}], 0x0, &(0x7f0000014100)) [ 1337.842177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.900643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r2], 0x38}}], 0x1, 0x0) 20:45:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002700)='/proc/stat\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0x80000001) [ 1338.068682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.094438] wlan1: authenticate with 08:02:11:00:00:00 [ 1338.096186] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1338.118176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.198988] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1338.211851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.263345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.303970] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:10 executing program 5: semget(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x0, 0x2, 0x210) semctl$IPC_RMID(r0, 0x0, 0x0) 20:45:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x43d6, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) 20:45:10 executing program 2: r0 = socket$inet(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @multicast1}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 20:45:10 executing program 1: semget$private(0x0, 0x0, 0x0) 20:45:10 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0) fallocate(r0, 0x0, 0x0, 0x400004) 20:45:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x6}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) 20:45:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0x500}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1338.407263] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1338.414843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1338.481291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000400)=@updsa={0x13c, 0x1a, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x6}}, @XFRMA_SET_MARK, @sa={0x0, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@broadcast}, {@in6=@mcast2}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x13c}}, 0x0) 20:45:10 executing program 5: semget(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = semget(0x0, 0x2, 0x210) semctl$IPC_RMID(r0, 0x0, 0x0) 20:45:10 executing program 7: sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) [ 1338.539109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.552084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f00000009c0)) 20:45:10 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0) fallocate(r0, 0x0, 0x0, 0x400004) [ 1338.611270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.667334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:10 executing program 6: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0x0, 0x0, 0x0, "a838678b4713193e"}}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder0\x00', 0x0, 0x0) 20:45:11 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 1338.859351] wlan1: authenticate with 08:02:11:00:00:00 [ 1338.861433] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1338.874999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.924728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1338.967006] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1338.981066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.025052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.070988] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x4001}], 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:11 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 20:45:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x31ecad270770207b, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x24}}, 0x0) 20:45:11 executing program 6: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x2c, 0x30]}}}}]}) 20:45:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0x600}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x36, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) 20:45:11 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0) fallocate(r0, 0x0, 0x0, 0x400004) 20:45:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x7}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1339.134451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.175146] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1339.192062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.232486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.260359] handle_bad_sector: 38 callbacks suppressed [ 1339.260374] attempt to access beyond end of device [ 1339.260374] loop7: rw=0, want=149, limit=64 [ 1339.267275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.287609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x62, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='ext4\x00', 0x0, 0x0) 20:45:11 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:45:11 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 1339.342599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:11 executing program 2: semget(0x2, 0x0, 0x0) 20:45:11 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x4001}], 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:11 executing program 0: set_mempolicy(0x1, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x00~(\x87P\x16}\x0e\x80\x1c\xadP:\x116\a\f\x16\xc7\r9cs\'C\x02\xd4\x16\b\xb5\xc6\xaaF\xedQ\b\x82\x82\xf1\xec\x96n0\a\x9c\x97\xdd\xd2\x95v\xe5\xcf\xa5\x87\xed\x9e\xc1\xaa[N\xc9[\xe3\x05R\x9ds`\xc0\xbbd\xc4_t;\xa1\xfb\xe3\x9a03\xe7<\xe4\x93{@\xa9\x06\x00\x94A\xe70gO\xae\n\xac\xc3\xebz\xb5\"\xb7\x18\x01\xf5\xd0\xf9\xa4z/\x90\x14\xcfv\x1f\xe0\x82Z\xa9\xf2\xf8\xa3\x00\x00\x00\x00\xfc`\xd0\x86R\xb9\x03\xd8\x8c\x92\xb6\xd7E!P\xb8\xb1\xa6\x9c\x02.\x03Ls\r\xb6\xd8f\xa7\x0f\x9b\x87e\x15.\xbe\xacb\b\x00\x00\x00\x82|\x94\x10\xdaU', 0x0) fallocate(r0, 0x0, 0x0, 0x400004) 20:45:11 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000440)=ANY=[], 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0xc0085508, 0x20000000) 20:45:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}]}, {0x4}]}]}, 0x30}}, 0x0) [ 1339.575824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.605584] wlan1: authenticate with 08:02:11:00:00:00 [ 1339.607265] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1339.626305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.653082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.704577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.712158] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1339.786696] attempt to access beyond end of device [ 1339.786696] loop7: rw=0, want=149, limit=64 [ 1339.815945] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1339.918962] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:12 executing program 2: fork() syz_open_dev$vcsu(&(0x7f0000000740), 0x0, 0x0) epoll_create(0x0) io_setup(0x8001, 0x0) 20:45:12 executing program 1: init_module(0x0, 0x0, 0x0) 20:45:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x9}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0x700}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x4001}], 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:12 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000000)) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x6) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 20:45:12 executing program 5: io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x61b8, &(0x7f0000000040)={0x0, 0x450b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r1 = syz_io_uring_setup(0x4ca6, &(0x7f0000000880)={0x0, 0x2a21, 0x0, 0x2, 0x257}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000980)='cgroup.max.descendants\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) openat$null(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000ac0)=[r2, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5) 20:45:12 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 1340.308861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.324449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.345229] wlan1: authenticate with 08:02:11:00:00:00 [ 1340.347009] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1340.364406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.383422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.415284] attempt to access beyond end of device [ 1340.415284] loop7: rw=0, want=149, limit=64 [ 1340.419211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.439617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.454982] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:12 executing program 1: syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd6096153f00383a"], 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) getpid() 20:45:12 executing program 0: r0 = syz_io_uring_setup(0x28b3, &(0x7f0000000380)={0x0, 0xeb67}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440)) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000001540)=r1, 0x1) 20:45:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000240)=""/20) 20:45:12 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x4001}], 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x78) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1340.559664] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:12 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) 20:45:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x12, 0x101, 0x0, 0x0, {0x7}, [@nested={0x4}, @typed={0x8, 0x13, 0x0, 0x0, @fd}]}, 0x20}}, 0x0) [ 1340.663074] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:12 executing program 5: kcmp(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 1340.726733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x60002) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x37}}) dup2(r1, r0) [ 1340.755708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.777554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.779842] wlan1: authenticate with 08:02:11:00:00:00 [ 1340.781540] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1340.804975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) [ 1340.887071] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0xf}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1f3442, 0x0) syz_mount_image$ext4(&(0x7f0000002880)='ext2\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100828, &(0x7f00000001c0)={[{@journal_async_commit}]}) 20:45:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0x900}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1340.991081] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:13 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000140)) 20:45:13 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0) [ 1341.034588] attempt to access beyond end of device [ 1341.034588] loop7: rw=0, want=149, limit=64 20:45:13 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) [ 1341.077843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.094960] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1341.129624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.142880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.186085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.188792] EXT4-fs (sda): can't mount with journal_async_commit in data=ordered mode [ 1341.211307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.241136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.522772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.551030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.553613] wlan1: authenticate with 08:02:11:00:00:00 [ 1341.555415] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1341.573560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.601171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.663957] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:13 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) 20:45:13 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:13 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000180)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000280)="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", 0x132, 0xb800}], 0x0, &(0x7f00000001c0)=ANY=[]) r1 = dup2(r0, r0) getdents64(r1, &(0x7f0000000040)=""/129, 0x81) 20:45:13 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) 20:45:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{0x2e, 0x0, 0xf00}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x11}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1341.771706] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1341.791415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:14 executing program 7: r0 = socket$unix(0x1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, r1/1000+10000}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x43, 0x0, &(0x7f0000000180)) [ 1341.876307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.879256] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1341.886698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.935756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1341.953462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.007847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.246321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.274245] wlan1: authenticate with 08:02:11:00:00:00 [ 1342.276049] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1342.296174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.314243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.366245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.381380] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:14 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) 20:45:14 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) 20:45:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0xfc}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) 20:45:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x3, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:14 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 20:45:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x12}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1342.485161] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:14 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:14 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) [ 1342.554554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.592273] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:14 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) [ 1342.618015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:14 executing program 6: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r0, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x40001, 0x0) write$vga_arbiter(r1, &(0x7f0000000880)=@other={'lock', ' ', 'io+mem'}, 0xc) r2 = socket$nl_audit(0x10, 0x3, 0x9) dup3(r2, r1, 0x0) 20:45:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 20:45:14 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1342.675120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.680772] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1342.689526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.725654] kauditd_printk_skb: 40 callbacks suppressed [ 1342.725671] audit: type=1400 audit(1648845914.968:361): avc: denied { relabelto } for pid=229460 comm="syz-executor.1" name="UDP-Lite" dev="sockfs" ino=132165 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=rawip_socket permissive=1 [ 1342.751712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.832443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:45:15 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001040)={'gretap0\x00'}) [ 1342.986482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.014485] wlan1: authenticate with 08:02:11:00:00:00 [ 1343.016458] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1343.039271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.120088] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1343.152556] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1343.158641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.208857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.223008] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, r2}}}], 0x28, 0xfffffdef}, 0x814) 20:45:15 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) 20:45:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) 20:45:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x14}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:15 executing program 2: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:45:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x10, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:15 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1343.327701] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1343.387480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.394415] wlan1: authenticate with 08:02:11:00:00:00 [ 1343.396325] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 20:45:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) [ 1343.462192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:15 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) 20:45:15 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) [ 1343.503077] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1343.523145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.534225] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1343.535826] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1343.546135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, r2}}}], 0x28, 0xfffffdef}, 0x814) 20:45:15 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1343.600026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.607002] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) [ 1343.655371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:15 executing program 1: perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x0) [ 1343.711972] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, r2}}}], 0x28, 0xfffffdef}, 0x814) [ 1343.843472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.870449] wlan1: authenticate with 08:02:11:00:00:00 [ 1343.872713] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1343.891052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.961822] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1343.963533] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 20:45:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) [ 1343.975361] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1343.977241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:16 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) [ 1344.025640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:16 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, r2}}}], 0x28, 0xfffffdef}, 0x814) 20:45:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x15}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1344.078985] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1344.183988] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1344.349121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.359742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.418340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.727585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.756344] wlan1: authenticate with 08:02:11:00:00:00 [ 1344.758226] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1344.777559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.863489] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) 20:45:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x2e, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x16}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 20:45:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 20:45:17 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) 20:45:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 20:45:17 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1344.966972] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1345.059071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.065648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.071000] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 20:45:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1345.095136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.129703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:17 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1345.159106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) 20:45:17 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1345.185956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() pidfd_open(0x0, 0x0) dup3(r1, r0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) 20:45:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1345.480031] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1345.524755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.529203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.550949] wlan1: authenticate with 08:02:11:00:00:00 [ 1345.552766] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1345.570621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.575109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.661801] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:18 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, "0000f0000000000300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x800015d}) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) 20:45:18 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) 20:45:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x17}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x30, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) splice(r2, 0x0, r1, 0x0, 0x44459cda, 0x0) [ 1345.770950] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:18 executing program 1: getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 20:45:18 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) recvmsg$unix(r0, 0x0, 0x0) [ 1345.857711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:18 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1345.878980] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1345.907605] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1345.928414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.934726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.995669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.002377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8}) copy_file_range(r0, 0x0, r0, 0x0, 0x0, 0x0) 20:45:18 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) [ 1346.062641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:18 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, "779b1e7567d62f09a2d166d436fc9990c772b9"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x200) 20:45:18 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xb) 20:45:18 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1346.326293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.343611] wlan1: authenticate with 08:02:11:00:00:00 [ 1346.345171] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1346.370676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.378360] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1346.383547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.435129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1346.447763] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1346.551531] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1346.656076] wlan1: authentication with 08:02:11:00:00:00 timed out 20:45:19 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0) 20:45:19 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xb) 20:45:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x6609) 20:45:19 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) 20:45:19 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000400)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}}}}}}, 0x0) 20:45:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x18}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) 20:45:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x69, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1347.774429] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1347.793459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.814332] wlan1: authenticate with 08:02:11:00:00:00 [ 1347.816206] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 20:45:20 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xb) [ 1347.836772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:20 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) [ 1347.881350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0x26e86dcbcdf72f00, 0x0) 20:45:20 executing program 5: syz_io_uring_setup(0x6f54, &(0x7f0000000700), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) [ 1347.919091] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:45:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) [ 1347.938294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.984730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:20 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x1, 0x0, &(0x7f00000002c0)) 20:45:20 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb}, 0xb) [ 1348.023015] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:45:20 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) 20:45:20 executing program 6: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x0) connect$inet(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6) getpeername(r3, &(0x7f0000000180)=@un=@abs, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x40000, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) pwrite64(r0, &(0x7f0000000300)="af", 0xfffffeb2, 0x0) lseek(r1, 0x0, 0x4) r5 = dup(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'hsr0\x00'}) [ 1348.129346] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1348.167428] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) 20:45:20 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) [ 1348.249714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.278742] wlan1: authenticate with 08:02:11:00:00:00 [ 1348.280385] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1348.301216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1348.383493] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1348.500134] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1348.606951] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1352.894929] Bluetooth: hci1: command 0x0409 tx timeout [ 1354.942978] Bluetooth: hci1: command 0x041b tx timeout [ 1356.164089] kmemleak: 34096 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1356.211577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.212730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.214685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1356.239133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.240163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.241697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1356.392069] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1356.395900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.454651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.509264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.821372] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1356.827693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1356.878970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x2, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = epoll_create(0x86) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 20:45:29 executing program 2: unshare(0x0) unshare(0x0) r0 = fork() tkill(r0, 0xb) wait4(0x0, &(0x7f0000000080), 0x2, &(0x7f0000000140)) 20:45:29 executing program 0: sync() sync() 20:45:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x19}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fadvise64(r0, 0x0, 0x0, 0x4) 20:45:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000180)) 20:45:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1356.991305] Bluetooth: hci1: command 0x040f tx timeout [ 1357.074406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.148805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:29 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) write$bt_hci(r0, &(0x7f0000000300)={0x1, @change_conn_link_key={{0x415, 0x2}}}, 0x6) [ 1357.203253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:29 executing program 7: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 20:45:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = epoll_create(0x86) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) [ 1357.278142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fadvise64(r0, 0x0, 0x0, 0x4) 20:45:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/217, 0xd9) 20:45:29 executing program 2: creat(&(0x7f0000000000)='./file2\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file2\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000040)=""/39, 0x35, 0x0) [ 1357.366649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.422399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.524560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.574153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.732084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.783409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 6: r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) syz_io_uring_setup(0xbe5, &(0x7f0000000000)={0x0, 0x32e6, 0x10, 0x3, 0x16f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2da1, &(0x7f0000000100)={0x0, 0x72b2, 0x2, 0x1, 0x64}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) epoll_create1(0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0xe01, 0x0, 0x6, 0x4, 0x1}, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) syz_io_uring_setup(0x11d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 20:45:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x5, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/217, 0xd9) 20:45:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fadvise64(r0, 0x0, 0x0, 0x4) 20:45:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvmmsg(r1, &(0x7f0000004800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 20:45:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x1a}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = epoll_create(0x86) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 20:45:30 executing program 7: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) [ 1357.957696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x20000001}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = epoll_create(0x86) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x4}) 20:45:30 executing program 7: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) [ 1358.032696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.037275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/217, 0xd9) 20:45:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000400)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8800000) fadvise64(r0, 0x0, 0x0, 0x4) [ 1358.088925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 6: r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) syz_io_uring_setup(0xbe5, &(0x7f0000000000)={0x0, 0x32e6, 0x10, 0x3, 0x16f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2da1, &(0x7f0000000100)={0x0, 0x72b2, 0x2, 0x1, 0x64}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) epoll_create1(0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0xe01, 0x0, 0x6, 0x4, 0x1}, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) syz_io_uring_setup(0x11d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) [ 1358.106853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.161263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 7: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 20:45:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') readlinkat(r0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/217, 0xd9) [ 1358.407037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:30 executing program 6: r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) syz_io_uring_setup(0xbe5, &(0x7f0000000000)={0x0, 0x32e6, 0x10, 0x3, 0x16f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2da1, &(0x7f0000000100)={0x0, 0x72b2, 0x2, 0x1, 0x64}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) epoll_create1(0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0xe01, 0x0, 0x6, 0x4, 0x1}, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) syz_io_uring_setup(0x11d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 20:45:30 executing program 5: msgctl$IPC_SET(0x0, 0x5, 0x0) [ 1358.456724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.467989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.519236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 2: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)='R', 0x1, 0x7fff}]) 20:45:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x1b}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:31 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), 0xffffffffffffffff) 20:45:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000400)) 20:45:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x6, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 20:45:31 executing program 6: r0 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) syz_io_uring_setup(0xbe5, &(0x7f0000000000)={0x0, 0x32e6, 0x10, 0x3, 0x16f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2da1, &(0x7f0000000100)={0x0, 0x72b2, 0x2, 0x1, 0x64}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) epoll_create1(0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index, 0xe01, 0x0, 0x6, 0x4, 0x1}, 0x1f) r3 = socket$netlink(0x10, 0x3, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r3) syz_io_uring_setup(0x11d8, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000008c0), &(0x7f0000000900)) 20:45:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000003c0)=@updsa={0x1f4, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@local, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x104, 0x14, {{'sha256\x00'}, 0x5c0, 0x0, "07b0f84686e910214d5e1473bb6676f7b3d2390f3bdb565a8fea0a4623c235a4b2042a3a32a9646d8842b67e4f978dd9e3be587ee12654f326238acee4495d495b4c6888838ffeb32abfbfbc4748a20a014973bfecbc0ea34eb80c7cd9c0145c5a231cc3560d127136c1e0f56bc1129a17f0d3d3725f479cb40af9002de2364beb0aadcac81d6f335bfdec3a061c00e48675db97c388ed8aa2f76f86cbaeb276a4f734770c3152dfa3e434891c70a656ba1dcab008ab2de2"}}]}, 0x1f4}}, 0x0) [ 1358.896252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.905140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30, 0x2d, 0x33, 0x3a, 0x38, 0x2f, 0x31]}}}}]}) [ 1358.963784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.968843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 20:45:31 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 20:45:31 executing program 5: capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$BLKGETSIZE(r1, 0x4b6d, 0x0) [ 1359.019441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.029202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)) [ 1359.039936] Bluetooth: hci1: command 0x0419 tx timeout 20:45:31 executing program 6: pipe2$9p(0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) [ 1359.129682] tmpfs: Bad value for 'mpol' [ 1359.133387] tmpfs: Bad value for 'mpol' [ 1359.329589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.342803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.383802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.393976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:31 executing program 7: socketpair(0x11, 0x3, 0x0, &(0x7f00000007c0)) 20:45:31 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) 20:45:31 executing program 5: mlockall(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 20:45:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 20:45:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3}, 0x23) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0xb, 0x0, 0x9}, 0x20) 20:45:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x1c}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x8, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1359.578112] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 1359.586810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 7: socketpair(0x11, 0x3, 0x0, &(0x7f00000007c0)) [ 1359.646292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="041f0000000000000502fff80401030502000107"], 0x108) setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0) 20:45:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x5ad}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000290000000b00000000008001000000001400000000000000290000003e000000010000000000000080"], 0xb0}, 0x0) [ 1359.716031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:31 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) creat(0x0, 0x1eb) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) [ 1359.747134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) [ 1359.819532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 7: socketpair(0x11, 0x3, 0x0, &(0x7f00000007c0)) [ 1359.877709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) 20:45:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="7ff64da7047c5619e225ee78ad2ac427beb840b33d910cd39d3dc9a5e3dfa96dec663b5193760cff0335afc148bf74e4252d40e0a69fa0555beb19a952cd17e67968396eb0dc0fbfe48b092676886ea11a55aa3257ec3c7f35073af453fe01a2ae932d7f32679cb2c6ea73434cc6a4607f611dbd81d6c157b64ce0ca7355ccae6a26449f6735d28670deef3275d73894a7021e8a906a925c63b038393860f7f63e8be855d3db11368e8814f0e19693f67ace35554c2b110dc46a0cf5227ec6980c92979f33f48e0514fd088ca7f0fd816370564b543cef81947dff9ac29ac336de8076a941fedc5a04de673a910070a4411cc8c3ddb3090d91abe9ff9d92f6dc406b75b8fb98591f9afde948cb04ad7ef75fa785b4e035731cb92cd6f304b3d938e1ba6c458a2c1160724bd99e338de7471a814d3ffe3a9168e3844643292ddb833e534533f5c293d2991627c741a624f992e77d9643617a982178b5ae05ba1cf5cccab4e0b6491b19a87abce13f9dbed6a43f18a6d18b5991114ecebc9b42f4aac0f1c513bfe0235ca6cdd37ea8560edcbeb890ab4e0e644a3efd24a673767ec6f12380fd11f9689fb10cfc3ecc3825bdb6249548fe79d3abc6f6e15014373eefad48e2b529835599f2332d6aa07c74b701ce7dc5cff24fc61d1c7fd73f6d2a9656cd6e00c26c1962168fc9a17e7842fa17ac18d41ab2ccc8e35640a0fab0d7ef341abba0447006d3112c0a7fa95e59eed69b6d5d783ce3e0a1533195b22e828f945476aae71fb5c6a8781551949b5178a9df7926d21ebf5fb9c5546d3c1cc48c07a2c37b6f7cb27d2d8f20549330ea270a5959701fbe7127fbca39f825b8251b473aecf9ec5d43a0879a25e0732d78d436800845ed89e758e34d5e9b8aac892512f5d38eb2d18e8f41d3978e30806722eba19864b4143b0f754f20a0958fd077152c696dbb0df2f0536574ad141590d370237b6c3a902e6fd9a560fb3f6fe7b9eb3557fce4b13fbd1e0942a7f475b7a00d6bc9b8778039a27abca782364fe69bfba036b39855622db55092560fd3152cb5e05dd9931fd0c99b4fc82a9975b7cee26c7ff4e6514154dcd338d634f12ba6258a67e7b2523570e0064f8846416bec8576cf61ec7e51e1e82efb21923391f2e5dfa9b29968b333c5423baf14cb79d2ef522178022c239dc6f45755dde15ee155ca8077847c0e5e662c2cb34b6f70569dc355f2c93e586e1043963da5a3b084c2cdeecd2f607afccc5e8d2a934d665a8fa3c69372feea59a4bdeb912971f3a4a66034d2c9443a71148716c1bc0b03a67631d48e2647e6d4259d166146b988625f93c3adce35a6146809147a67310b5d9e240431b555aad6ea95869f98fe468bf903db29883d42500cecc6ddeae9207792d27f88989adddf704e3a50d8442ba5538c4c84c1fd9fa02bdaf605cc8e99075035dd6fd2fcbe81d6978d9563bf326df277b47d6db9fc084abd234d0e72e1d9ee073f906a07ec27a40d70ef04baf86cbb033b9e543c446efe67053a8fbdc9e8c054e06b1fb3cbc9c28fe3b92757c5917e08263b2acff506f306945206b5d092fc106bc5e78b501f8b70acd612a55e46f10b21ce2fad1efac242d9486c273344d93977d5ede4262274e1b021c5e4c50f3908ca98b1315ea31ff92a28aeedfefb4669dba44e7cc1670135dcaaf1a7330e00d0a1f44c986ee29f5e953b196bd4d09d4c8daf0b11d52dae8ee987a8e00541dda76af1bb9cae8e234831114b22235881cd928efa17cd8324a37bf65d520c0c192a36339cd4aa522e90eed0dfa9bc41d2bdf90792b4edf306a0880a1b5d610a2acba11800006c98273693cd044a781ea24974982fad761a118d6518c2c513ee44b7bfb610a4aa66e44b8fa63eeb55f40cf2b6d4f3b66afabe90be150ea5e97ec81e2d748aef7c66188bb97d2fde25a7fdfdfd0c8d6b24d1d92bddc943315bf51d63f81d171dfb3125daf9f2187d92e3bcc06d0d4c808e0728bd646b7cfd1a192482ec103ea118ec64af91c5ed3fb7b5615b80cdc5d4ce2497764f08", 0x5ad}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000290000000b00000000008001000000001400000000000000290000003e000000010000000000000080"], 0xb0}, 0x0) [ 1360.025695] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 1360.038116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.083936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.190544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.244506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) 20:45:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x5ad}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000290000000b00000000008001000000001400000000000000290000003e000000010000000000000080"], 0xb0}, 0x0) 20:45:32 executing program 7: socketpair(0x11, 0x3, 0x0, &(0x7f00000007c0)) 20:45:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) 20:45:32 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000001c80)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002340), 0xffffffffffffffff) 20:45:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x9, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x1d}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1360.453092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.455474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x5ad}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1400000000000000290000000b00000000008001000000001400000000000000290000003e000000010000000000000080"], 0xb0}, 0x0) [ 1360.520612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.527658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) [ 1360.582683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.586718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/13) 20:45:32 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:32 executing program 2: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x5000000}, 0x20) [ 1360.715101] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1360.736381] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 1360.738121] FAT-fs (loop7): Filesystem has been set read-only [ 1360.751678] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) 20:45:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ptrace(0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fork() fork() ptrace(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 20:45:33 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) [ 1360.903165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.905706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:33 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) [ 1360.953342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1360.959746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xa, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x60}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1361.117397] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1361.133371] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 1361.135302] FAT-fs (loop7): Filesystem has been set read-only [ 1361.238350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.294872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.348802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.352309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.431062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.485373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.659092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.709309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.793706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.843660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:34 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flistxattr(r0, &(0x7f0000000040)=""/4, 0x4) 20:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ptrace(0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fork() fork() ptrace(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 20:45:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xb, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1361.990375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.036258] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 20:45:34 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x48, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x1d, 0x25, 0x0, 0x0, {0x7}}, 0x20}}, 0x0) [ 1362.070281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.082275] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 1362.084332] FAT-fs (loop7): Filesystem has been set read-only 20:45:34 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) [ 1362.117696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.136028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) [ 1362.178341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ptrace(0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fork() fork() ptrace(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) [ 1362.232742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1362.241430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:34 executing program 2: unshare(0x28020600) unshare(0x48020200) [ 1362.433033] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 1362.454194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.490314] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 580) [ 1362.492650] FAT-fs (loop7): Filesystem has been set read-only [ 1362.513309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.561638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.617330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {&(0x7f0000000180)="f8ffff1000000a0ff8ffff0f", 0xc, 0x4000}, {&(0x7f0000000280)="53595a4b414c4c45522020080000eb80325132510000eb80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100089eb70325132510000eb70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531202020202020200089eb70325132510000eb70325105000a5b", 0x9e, 0x4800}], 0x0, &(0x7f0000011300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x2040) 20:45:35 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/192, 0xc0}], 0x1, 0x1, 0x0) 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x10, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:35 executing program 7: r0 = memfd_create(&(0x7f0000000340)='\x05', 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x2011, r0, 0x0) fcntl$addseals(r0, 0x409, 0xe) 20:45:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x2}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) ptrace(0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) fork() fork() ptrace(0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) 20:45:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000010000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)=ANY=[], 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:45:35 executing program 2: unshare(0x28020600) unshare(0x48020200) [ 1362.942468] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 1362.947962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1362.950305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.002471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.010719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x11, &(0x7f0000000c00)={0x0, {{0x2, 0x0, @private}}}, 0x88) [ 1363.059273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.065554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:45:35 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f0000002300)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c, 0x0, 0x0, &(0x7f0000002180)=[@hopopts={{0x18}}], 0x18}, 0x0) 20:45:35 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x8923, &(0x7f0000000140)="dafb376c617c7c58f191883a") 20:45:35 executing program 2: unshare(0x28020600) unshare(0x48020200) 20:45:35 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x32, &(0x7f0000000100), 0x4) 20:45:35 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) [ 1363.370847] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 1363.380720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fchmod(r0, 0x0) [ 1363.407460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.431416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.457982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x3}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1363.653551] audit: type=1400 audit(1648845935.896:362): avc: denied { setattr } for pid=233699 comm="syz-executor.7" name="smaps" dev="proc" ino=132941 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 20:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x11, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1363.682825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:35 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) [ 1363.755172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) io_cancel(0x0, 0x0, 0x0) 20:45:36 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) writev(r0, &(0x7f0000000300)=[{0x0}, {0x0, 0x8800000}, {&(0x7f00000002c0)="9a", 0x1}], 0x3) 20:45:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fchmod(r0, 0x0) [ 1363.822346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.841859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.919352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.990566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.146247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.195867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.300988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.352291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:36 executing program 5: io_uring_setup(0x54f9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x3, 0x22b}) syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) 20:45:36 executing program 2: unshare(0x28020600) unshare(0x48020200) 20:45:36 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000002a40)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x0) r3 = syz_io_uring_setup(0x799f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1ec8, &(0x7f0000000240)={0x0, 0x96f8, 0x2, 0x3, 0xb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x30, r0, 0x0) clock_gettime(0x0, &(0x7f0000001d40)) syz_io_uring_submit(0x0, r4, &(0x7f00000021c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000002080), &(0x7f0000002180)='./file1\x00', 0x800, 0x0, 0x1, {0x0, r2}}, 0x4) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80743, 0x88) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 20:45:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:45:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x69, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x4}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:36 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:45:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fchmod(r0, 0x0) [ 1364.521587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') fchmod(r0, 0x0) [ 1364.590816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.650959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.659812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.723542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.795828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.972370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.022819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.107163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.156663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:37 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000300)) 20:45:37 executing program 6: syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @remote, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 20:45:37 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="ff", 0x1}], 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 20:45:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x0) 20:45:37 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) 20:45:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x117, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x5}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) [ 1365.310670] 9pnet: Insufficient options for proto=fd 20:45:37 executing program 6: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x86, 0x0, 'client0\x00', 0x0, "ff7f00", "4abed9a9721e9d0a344fb75dfc3b78e1869d00"}) [ 1365.381996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:37 executing program 2: r0 = io_uring_setup(0x7fa5, &(0x7f0000001580)={0x0, 0xe6f9}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 20:45:37 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x6) fallocate(r0, 0x3, 0x0, 0xffffffff) [ 1365.550687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:37 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 20:45:37 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x0) 20:45:37 executing program 5: unshare(0x28020600) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xa40, 0x0) pidfd_send_signal(r0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000004c0)={0x82001000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x2b}, &(0x7f00000002c0)=""/230, 0xe6, &(0x7f00000003c0)=""/136, &(0x7f0000000480)=[r2, r2, r2, r2, r2, r2, r2], 0x7}, 0x58) r3 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f0000001340)=ANY=[]) r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x60142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) clone3(&(0x7f0000000300)={0x190000600, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x24}, &(0x7f0000000100)=""/47, 0x2f, &(0x7f0000000140)=""/222, &(0x7f00000002c0)=[r1, 0xffffffffffffffff, r2, 0x0], 0x4, {r4}}, 0x58) 20:45:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 20:45:38 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r0, 0x1, 0x6, 0x0, &(0x7f0000000200)) [ 1370.494991] Bluetooth: hci1: command 0x0409 tx timeout [ 1370.558957] Bluetooth: hci7: command 0x0409 tx timeout [ 1372.543334] Bluetooth: hci1: command 0x041b tx timeout [ 1372.606940] Bluetooth: hci7: command 0x041b tx timeout [ 1373.527145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.529290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.559853] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1373.594519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.596552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.599938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1373.786667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.816761] wlan1: authenticate with 08:02:11:00:00:00 [ 1373.818293] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1373.847625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.905195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.927956] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1374.030956] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1374.134954] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1374.214286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.242354] wlan1: authenticate with 08:02:11:00:00:00 [ 1374.243809] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1374.264146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.350965] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1374.454965] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1374.558974] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1374.591224] Bluetooth: hci1: command 0x040f tx timeout [ 1374.655996] Bluetooth: hci7: command 0x040f tx timeout [ 1375.467795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.470325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.474385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1375.510848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.513046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.517032] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1375.718231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.777053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.832131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.139128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.189469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fork() 20:45:48 executing program 7: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 20:45:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x6}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:48 executing program 2: pipe2$9p(&(0x7f0000000240), 0x0) 20:45:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x0) 20:45:48 executing program 6: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}, {&(0x7f00000005c0)="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", 0x10f, 0xe000}], 0x0, &(0x7f0000000080)) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 20:45:48 executing program 0: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3cd04d6b66732e66617400020801090470000000f801", 0x17}, {0x0, 0x0, 0x1000a04}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 20:45:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x129, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x800}], 0x0, &(0x7f0000000080)) 20:45:48 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "60e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdc", "ef341e008fa00504f312e7b8462700f3", {"36cd250a0cb728d6eec84085575dab02", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1376.516391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r0, &(0x7f0000ff8000/0x3000)=nil, 0x6000) mlock(&(0x7f0000ff9000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3) 20:45:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x28}}, 0x0) [ 1376.530770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x800}], 0x0, &(0x7f0000000080)) 20:45:48 executing program 7: r0 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x8001400) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) keyctl$chown(0xb, r0, 0x0, 0x0) [ 1376.592320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.647753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1376.709980] Bluetooth: hci7: command 0x0419 tx timeout 20:45:48 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) sendmmsg(r0, &(0x7f000000ae00)=[{{&(0x7f0000004bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000006fc0)=[{0x10}], 0x10}}], 0x1, 0x0) 20:45:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x800}], 0x0, &(0x7f0000000080)) [ 1376.960248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1377.009774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1381.310973] Bluetooth: hci1: command 0x0409 tx timeout [ 1383.358995] Bluetooth: hci1: command 0x041b tx timeout [ 1383.807126] Bluetooth: hci2: command 0x0406 tx timeout [ 1385.406940] Bluetooth: hci1: command 0x040f tx timeout [ 1386.784775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.786944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.790578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1386.859640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.862123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.865672] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1387.051263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.078520] wlan1: authenticate with 08:02:11:00:00:00 [ 1387.080425] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1387.106977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.161926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.190975] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1387.294961] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1387.399035] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1387.454976] Bluetooth: hci1: command 0x0419 tx timeout [ 1387.470245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.499212] wlan1: authenticate with 08:02:11:00:00:00 [ 1387.500730] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1387.520772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:45:59 executing program 1: fork() wait4(0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) 20:45:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/38, 0x26) 20:45:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x7}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:45:59 executing program 0: io_uring_setup(0x642b, &(0x7f0000000580)={0x0, 0x0, 0x2, 0x0, 0x3b1}) 20:45:59 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "60e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdc", "ef341e008fa00504f312e7b8462700f3", {"36cd250a0cb728d6eec84085575dab02", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 20:45:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000040)="03", 0x1, 0x800}], 0x0, &(0x7f0000000080)) 20:45:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xd000, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1387.607018] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1387.663054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:45:59 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "60e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdc", "ef341e008fa00504f312e7b8462700f3", {"36cd250a0cb728d6eec84085575dab02", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1387.713021] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1387.722465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.787493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.815220] wlan1: authentication with 08:02:11:00:00:00 timed out 20:46:00 executing program 7: sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000003c0)}], 0x2}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) [ 1387.883224] wlan1: authenticate with 08:02:11:00:00:00 [ 1387.884847] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 20:46:00 executing program 0: accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = getpgrp(0xffffffffffffffff) waitid(0x1, r0, &(0x7f0000000100), 0x4, &(0x7f0000000180)) 20:46:00 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@local, @random="31f52699464f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "60e9eca51b913db8f2e8c451c6492a93273f3e5a81aebb3fe1580051a1657cdc", "ef341e008fa00504f312e7b8462700f3", {"36cd250a0cb728d6eec84085575dab02", "c8aca1d59b8892d6f675cca0eefe4b0b"}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 1388.019716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.113328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x28}}], 0x2, 0x0) 20:46:00 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/38, 0x26) [ 1388.163708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:00 executing program 2: io_setup(0x5, &(0x7f0000000000)=0x0) eventfd2(0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\xf5\\:-\x00', 0x5) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 1388.258140] wlan1: aborting authentication with 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) 20:46:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000000)=""/15) 20:46:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0xf800, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:00 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x541b, 0x0) [ 1388.482360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.541325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.594436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.901779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1388.951699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.958954] Bluetooth: hci1: command 0x0409 tx timeout [ 1395.007068] Bluetooth: hci1: command 0x041b tx timeout [ 1397.054946] Bluetooth: hci1: command 0x040f tx timeout [ 1398.274023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.276482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.279975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1398.360701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1398.363142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1398.366539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1398.568620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.598544] wlan1: authenticate with 08:02:11:00:00:00 [ 1398.600285] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1398.623944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.678546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1398.710984] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1398.815003] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1398.918958] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1398.987657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.016239] wlan1: authenticate with 08:02:11:00:00:00 [ 1399.018072] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1399.037778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.103972] Bluetooth: hci1: command 0x0419 tx timeout 20:46:11 executing program 7: sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000003c0)}], 0x2}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) 20:46:11 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 20:46:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/38, 0x26) [ 1399.126951] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:46:11 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) 20:46:11 executing program 6: syz_emit_ethernet(0x56, &(0x7f0000000080)={@random="07af43ba2470", @remote, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "7bc74f84dbc157914cd8c864a1bea9a4d30d9eedbf84c7959dd76445502e8debf42a1f820f5fe25e762e614b3d9ae47ca38e6862065da5e5550f0dfc6eba6e8f"}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x3}, @ipv6=@tipc_packet={0x0, 0x6, "8881c3", 0x20, 0x6, 0x0, @remote, @mcast2, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}, 0x52) 20:46:11 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000300)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="88", 0x1, 0xb800}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mode=0x00000000000000ff,nojoliet,overriderockperm']) 20:46:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x9}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x3, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1399.214962] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1399.228895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.231292] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:46:11 executing program 1: mlockall(0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000004000/0x400000)=nil) 20:46:11 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) [ 1399.302333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.312397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:11 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$msdos(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/38, 0x26) [ 1399.335001] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1399.358740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f00000001c0), 0x4) [ 1399.386432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:11 executing program 2: r0 = fsopen(&(0x7f0000000080)='bdev\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101141) dup2(r0, r1) 20:46:11 executing program 7: sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000003c0)}], 0x2}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) [ 1399.453029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:11 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) [ 1399.665403] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1399.671751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.767252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.769367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.795367] wlan1: authenticate with 08:02:11:00:00:00 [ 1399.797108] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1399.818483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1399.903062] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1400.009935] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1400.118946] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1404.543938] Bluetooth: hci7: command 0x0409 tx timeout [ 1406.590937] Bluetooth: hci7: command 0x041b tx timeout [ 1408.639973] Bluetooth: hci7: command 0x040f tx timeout [ 1409.917057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.919305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.922547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1409.981728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.983580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.986656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1410.161247] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.166484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.224565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.280941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.586655] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.592292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.644009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.686943] Bluetooth: hci7: command 0x0419 tx timeout 20:46:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/243, 0xf3) 20:46:22 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x4]}, 0x8}) 20:46:22 executing program 0: mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 20:46:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0xf}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:22 executing program 7: sendmmsg(0xffffffffffffffff, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f00000003c0)}], 0x2}}], 0x1, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xffffffffffffff94, 0x0}}], 0x200002dc) 20:46:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001140)={@rand_addr=0x64010101, @private=0xa010101}, 0xc) 20:46:22 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) [ 1410.818769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:23 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x541d, &(0x7f0000000100)={0x0, 0x80}) 20:46:23 executing program 2: semget(0x3, 0x0, 0x6b4) [ 1410.890929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.921606] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1410.948853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:23 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') 20:46:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x540e, 0x0) [ 1411.033512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:23 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) dup2(r0, r1) 20:46:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) 20:46:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:23 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') [ 1411.265941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.296936] wlan1: authenticate with 08:02:11:00:00:00 [ 1411.298517] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1411.315419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.366636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1411.407553] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1411.513792] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1411.624221] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1415.935067] Bluetooth: hci7: command 0x0409 tx timeout [ 1417.983956] Bluetooth: hci7: command 0x041b tx timeout [ 1420.031010] Bluetooth: hci7: command 0x040f tx timeout [ 1421.117864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.119838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.124930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1421.173975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.175965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.180687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1421.389217] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1421.394249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.451303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.508186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.813579] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1421.820948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1421.869042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000640)='&', 0x1, 0x0) 20:46:34 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) dup2(r0, r1) 20:46:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x11}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="38cf", 0x2}], 0x1}}, {{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001300)="fa7e", 0x2}], 0x1}}], 0x2, 0xc840) 20:46:34 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') 20:46:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:34 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) 20:46:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1422.022692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.078966] Bluetooth: hci7: command 0x0419 tx timeout 20:46:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000640)='&', 0x1, 0x0) [ 1422.110262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:34 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) dup2(r0, r1) [ 1422.166682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.181759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.262394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="38cf", 0x2}], 0x1}}, {{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001300)="fa7e", 0x2}], 0x1}}], 0x2, 0xc840) 20:46:34 executing program 7: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) dup2(r0, r1) 20:46:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000640)='&', 0x1, 0x0) 20:46:34 executing program 0: chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)='./file0\x00') [ 1422.503439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="38cf", 0x2}], 0x1}}, {{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001300)="fa7e", 0x2}], 0x1}}], 0x2, 0xc840) [ 1422.552756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.567237] wlan1: authenticate with 08:02:11:00:00:00 [ 1422.568804] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1422.672157] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) 20:46:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x12}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1422.775902] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) 20:46:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x38}}, 0x0) [ 1422.878955] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1422.960282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.977350] wlan1: authenticate with 08:02:11:00:00:00 [ 1422.978812] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1423.018117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.077414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.087017] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1423.190988] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1423.295023] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1423.389667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.418270] wlan1: authenticate with 08:02:11:00:00:00 [ 1423.420168] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1423.438900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.528034] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1423.631006] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1423.734971] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1427.455932] Bluetooth: hci7: command 0x0409 tx timeout [ 1429.502945] Bluetooth: hci7: command 0x041b tx timeout [ 1431.550926] Bluetooth: hci7: command 0x040f tx timeout [ 1432.633661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.635346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.638471] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1432.685477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1432.687092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1432.690386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1432.870294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1432.876114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.933160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.987493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.292999] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1433.300065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.347593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000640)='&', 0x1, 0x0) 20:46:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x28, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="38cf", 0x2}], 0x1}}, {{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001300)="fa7e", 0x2}], 0x1}}], 0x2, 0xc840) 20:46:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x38}}, 0x0) 20:46:45 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) 20:46:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) 20:46:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x14}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x38}}, 0x0) [ 1433.530072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:45 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0xffffffffffffc587}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1a40c2, 0x0) unshare(0x28020600) acct(&(0x7f0000000140)='./file1/file0\x00') unshare(0x48020200) [ 1433.599986] Bluetooth: hci7: command 0x0419 tx timeout [ 1433.603198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) 20:46:45 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 1433.661320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.664508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.728278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x38}}, 0x0) [ 1433.786852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.970327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.021515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.115598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.148521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 20:46:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@migrate={0x50, 0x1e, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@remote}}}, 0x50}}, 0x0) 20:46:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) 20:46:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x15}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0xffffffffffffc587}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1a40c2, 0x0) unshare(0x28020600) acct(&(0x7f0000000140)='./file1/file0\x00') unshare(0x48020200) 20:46:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x2e, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:46 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000004540)={0x24, @short}, 0x14) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmmsg$sock(r0, &(0x7f00000021c0)=[{{0x0, 0x2, 0x0}}], 0x324, 0x0) [ 1434.435827] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. 20:46:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) [ 1434.476624] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1434.485308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.492686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) [ 1434.550592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.553897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:46 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 1434.607047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.610781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:46 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0xffffffffffffc587}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1a40c2, 0x0) unshare(0x28020600) acct(&(0x7f0000000140)='./file1/file0\x00') unshare(0x48020200) 20:46:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) 20:46:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) 20:46:47 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 1434.925567] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1434.948833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.952540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1434.997552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.005152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) fallocate(r0, 0x20, 0x0, 0x8000) 20:46:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x69, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x16}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:47 executing program 5: syz_io_uring_setup(0x2734, &(0x7f0000000000), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 20:46:47 executing program 6: r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000001580)="eb58906d6b66732e66617400020820000200008000f8000020005d00000000000000000001", 0x25}, {0x0, 0x0, 0xffffffffffffc587}], 0x0, &(0x7f00000000c0)=ANY=[]) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1a40c2, 0x0) unshare(0x28020600) acct(&(0x7f0000000140)='./file1/file0\x00') unshare(0x48020200) [ 1435.293647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.334733] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1435.352724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.389403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.411571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.451168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.466521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.759508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.775726] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1435.782068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.810933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.830360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:48 executing program 1: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010c00)="ff4344303031", 0x6, 0x9000}, {&(0x7f0000000140)="88001c0000000000001c00080010000008007809140b2a3a0802000001000001010053500701beef005252050181505824ab87a8", 0x34, 0xe000}], 0x0, &(0x7f0000000080)) 20:46:48 executing program 7: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x402, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001500), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:46:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 20:46:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x0, 0x5, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @hao={0xc9, 0x10, @mcast2}]}, 0x38) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 20:46:48 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x64000000}}]}, 0x34}}, 0x0) 20:46:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x17}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x117, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1436.041839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.076009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.097907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000001600)) 20:46:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), 0xffffffffffffffff) [ 1436.134371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.155925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.190441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:48 executing program 7: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 20:46:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000180)="4a1a4f3600040000d7f45c33f2ce969f1fc98a83c3f2fd9e7510372b9c655fe73593d355d59b3fd375", 0x29, 0x1500}], 0x0, &(0x7f0000000080)) 20:46:48 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 20:46:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_init() [ 1436.473586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.521276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.526278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.573465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x129, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:48 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_init() 20:46:48 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) 20:46:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x18}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:48 executing program 1: io_setup(0x5, &(0x7f0000000080)=0x0) io_destroy(r0) io_setup(0x101, &(0x7f0000000100)) io_submit(r0, 0x0, 0x0) 20:46:48 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)={0x37c, 0x453, 0x0, 0x0, 0x0, "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"}, 0x37c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0) [ 1436.731182] audit: type=1107 audit(1648846008.974:363): pid=241323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='…mòÇ!ïû+vÁrE0U³+x8MÔ8»°è-@Ïy¸ºJb8ÉëÀ‘½Â ƒuñ†Ÿ¨5¸Èu˜ÁA„nÈ£pººâ T«tƒ‚+Ž¸¡Ì@XiXKö‚c‰=3r}Pò™Œžà[‚y¿£}å]#ØYÎ,Ösú$¥n7vî¤+aIg{–fÔ€ Y„Ǥ‰®™\ú*–ÛQ̵©Ìƒiïa³lÀë¢4Õ]Ým [ 1436.731182] -ÒÎ8»3(,馭(æúà'òcúÀÍ="óôÀ­B7ª#¿c†>¼6z­»™U‰s:‰mú§+'3>ý¶Ä…KCsÎ?$†Â$Ÿ [ 1436.731182] sê ÔÙ‰¯vÁV5ìøqù,veä§p]“*çr±;è£á˜"(JÿóÎVoì›~?Ì!Au5¥LjϸûüYK8ksrÅ3É¿¹l.ë€pkW-/èøò+•]õ æcZßÌ< [ 1436.733236] selinux_netlink_send: 95 callbacks suppressed [ 1436.733255] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=241328 comm=syz-executor.7 [ 1436.805082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_init() [ 1436.856589] audit: type=1107 audit(1648846009.100:364): pid=241323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='…mòÇ!ïû+vÁrE0U³+x8MÔ8»°è-@Ïy¸ºJb8ÉëÀ‘½Â ƒuñ†Ÿ¨5¸Èu˜ÁA„nÈ£pººâ T«tƒ‚+Ž¸¡Ì@XiXKö‚c‰=3r}Pò™Œžà[‚y¿£}å]#ØYÎ,Ösú$¥n7vî¤+aIg{–fÔ€ Y„Ǥ‰®™\ú*–ÛQ̵©Ìƒiïa³lÀë¢4Õ]Ým [ 1436.856589] -ÒÎ8»3(,馭(æúà'òcúÀÍ="óôÀ­B7ª#¿c†>¼6z­»™U‰s:‰mú§+'3>ý¶Ä…KCsÎ?$†Â$Ÿ [ 1436.856589] sê ÔÙ‰¯vÁV5ìøqù,veä§p]“*çr±;è£á˜"(JÿóÎVoì›~?Ì!Au5¥LjϸûüYK8ksrÅ3É¿¹l.ë€pkW-/èøò+•]õ æcZßÌ< [ 1436.870538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1436.893088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:49 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) 20:46:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) [ 1436.983156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_init() [ 1437.010362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) [ 1437.046302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:49 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)={0x37c, 0x453, 0x0, 0x0, 0x0, "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"}, 0x37c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0) 20:46:49 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x0, 0x1, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7e0}], 0x1) 20:46:49 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5326, 0x0) [ 1437.388740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.392670] audit: type=1107 audit(1648846009.635:365): pid=241750 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='…mòÇ!ïû+vÁrE0U³+x8MÔ8»°è-@Ïy¸ºJb8ÉëÀ‘½Â ƒuñ†Ÿ¨5¸Èu˜ÁA„nÈ£pººâ T«tƒ‚+Ž¸¡Ì@XiXKö‚c‰=3r}Pò™Œžà[‚y¿£}å]#ØYÎ,Ösú$¥n7vî¤+aIg{–fÔ€ Y„Ǥ‰®™\ú*–ÛQ̵©Ìƒiïa³lÀë¢4Õ]Ým [ 1437.392670] -ÒÎ8»3(,馭(æúà'òcúÀÍ="óôÀ­B7ª#¿c†>¼6z­»™U‰s:‰mú§+'3>ý¶Ä…KCsÎ?$†Â$Ÿ [ 1437.392670] sê ÔÙ‰¯vÁV5ìøqù,veä§p]“*çr±;è£á˜"(JÿóÎVoì›~?Ì!Au5¥LjϸûüYK8ksrÅ3É¿¹l.ë€pkW-/èøò+•]õ æcZßÌ< [ 1437.392784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.404474] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=241754 comm=syz-executor.7 [ 1437.444085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.445704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:51 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)={0x37c, 0x453, 0x0, 0x0, 0x0, "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"}, 0x37c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0) 20:46:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x3, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x19}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, 0x0) 20:46:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:51 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x15, 0xc21, 0x0, 0x0, {0x2}, [@generic="02"]}, 0x18}}, 0x0) 20:46:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) [ 1438.901462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1438.904283] wlan1: authenticate with 08:02:11:00:00:00 [ 1438.906919] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1438.918701] audit: type=1107 audit(1648846011.162:366): pid=241862 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='…mòÇ!ïû+vÁrE0U³+x8MÔ8»°è-@Ïy¸ºJb8ÉëÀ‘½Â ƒuñ†Ÿ¨5¸Èu˜ÁA„nÈ£pººâ T«tƒ‚+Ž¸¡Ì@XiXKö‚c‰=3r}Pò™Œžà[‚y¿£}å]#ØYÎ,Ösú$¥n7vî¤+aIg{–fÔ€ Y„Ǥ‰®™\ú*–ÛQ̵©Ìƒiïa³lÀë¢4Õ]Ým [ 1438.918701] -ÒÎ8»3(,馭(æúà'òcúÀÍ="óôÀ­B7ª#¿c†>¼6z­»™U‰s:‰mú§+'3>ý¶Ä…KCsÎ?$†Â$Ÿ [ 1438.918701] sê ÔÙ‰¯vÁV5ìøqù,veä§p]“*çr±;è£á˜"(JÿóÎVoì›~?Ì!Au5¥LjϸûüYK8ksrÅ3É¿¹l.ë€pkW-/èøò+•]õ æcZßÌ< [ 1438.919492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=241871 comm=syz-executor.7 [ 1438.932245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) [ 1438.958968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.993346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x40802, 0x0) pwrite64(r0, &(0x7f00000001c0)='-', 0x1, 0x0) [ 1439.015060] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1439.016334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.021433] wlan1: authenticated [ 1439.023318] mac80211_hwsim hwsim161 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1439.026638] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1439.049244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 7: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)={0x37c, 0x453, 0x0, 0x0, 0x0, "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"}, 0x37c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006440)={0x14}, 0x63}}, 0x0) [ 1439.069676] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1439.071714] wlan1: associated [ 1439.073196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) [ 1439.315721] audit: type=1107 audit(1648846011.559:367): pid=241998 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='…mòÇ!ïû+vÁrE0U³+x8MÔ8»°è-@Ïy¸ºJb8ÉëÀ‘½Â ƒuñ†Ÿ¨5¸Èu˜ÁA„nÈ£pººâ T«tƒ‚+Ž¸¡Ì@XiXKö‚c‰=3r}Pò™Œžà[‚y¿£}å]#ØYÎ,Ösú$¥n7vî¤+aIg{–fÔ€ Y„Ǥ‰®™\ú*–ÛQ̵©Ìƒiïa³lÀë¢4Õ]Ým [ 1439.315721] -ÒÎ8»3(,馭(æúà'òcúÀÍ="óôÀ­B7ª#¿c†>¼6z­»™U‰s:‰mú§+'3>ý¶Ä…KCsÎ?$†Â$Ÿ [ 1439.315721] sê ÔÙ‰¯vÁV5ìøqù,veä§p]“*çr±;è£á˜"(JÿóÎVoì›~?Ì!Au5¥LjϸûüYK8ksrÅ3É¿¹l.ë€pkW-/èøò+•]õ æcZßÌ< [ 1439.316374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=262 sclass=netlink_audit_socket pid=242044 comm=syz-executor.7 20:46:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDMKTONE(r0, 0x4b30, 0x0) [ 1439.387482] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 20:46:51 executing program 0: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x7, &(0x7f0000000100), 0x0) 20:46:51 executing program 2: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)="c0", 0x1, 0xfffffffffffffffb) [ 1439.402598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.409616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 6: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4, 0x0, 0x0, 0x0, 0x2ff}}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, 0x0) [ 1439.449067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1439.457210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) io_setup(0x283, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000015c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_cancel(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 20:46:51 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5387, &(0x7f0000000000)) 20:46:53 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x2, 0x210) semctl$IPC_RMID(r0, 0x0, 0x0) 20:46:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x2}]}]}, 0x24}}, 0x0) 20:46:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x1a}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x4, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:53 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 20:46:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000002c0), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002e00)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x90}, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup2(r0, r0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) io_submit(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) 20:46:53 executing program 1: r0 = epoll_create(0x1) r1 = epoll_create(0x404) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) dup2(r2, r0) 20:46:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1440.872719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.886038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) 20:46:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1440.946526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.954494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.005746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.011227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:53 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) 20:46:53 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000002400), 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) 20:46:53 executing program 1: r0 = epoll_create(0x1) r1 = epoll_create(0x404) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) dup2(r2, r0) 20:46:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:46:53 executing program 6: r0 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) clone3(&(0x7f0000002100)={0x1800000, 0x0, 0x0, &(0x7f0000001ec0), {}, &(0x7f0000001f00)=""/155, 0x9b, 0x0, &(0x7f00000020c0)=[r0, 0x0], 0x2}, 0x58) 20:46:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 1441.331657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.346282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.375980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.384632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.599392] audit: type=1400 audit(1648846013.843:368): avc: denied { checkpoint_restore } for pid=242837 comm="syz-executor.6" capability=40 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 20:46:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x6, 0x6, 0x0) 20:46:55 executing program 1: r0 = epoll_create(0x1) r1 = epoll_create(0x404) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) dup2(r2, r0) 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x1c, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x1b}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:55 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x9, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="13892a42a51deefe6c11ee55facc", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 20:46:55 executing program 2: syz_mount_image$nfs4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 20:46:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x1, 0x0) 20:46:55 executing program 5: io_setup(0x5, &(0x7f0000000080)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 1442.925244] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1442.950408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1442.956184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 2: epoll_create(0x20) 20:46:55 executing program 6: syslog(0x2, &(0x7f0000000000)=""/55, 0xfffffffffffffd62) 20:46:55 executing program 1: r0 = epoll_create(0x1) r1 = epoll_create(0x404) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)) dup2(r2, r0) [ 1443.016734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.020968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}]}]}]}, 0x3c}}, 0x0) 20:46:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x6, 0x6, 0x0) [ 1443.076953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.081071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 20:46:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x6, 0x6, 0x0) 20:46:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) [ 1443.387976] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 1443.395804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.397934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.450909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.454238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:55 executing program 1: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) 20:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x28, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0x6, 0x6, 0x0) 20:46:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 20:46:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x1c}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="49a2638fc9b15cc08910be4e590140eba8f49fb06fe9246a974a584119f1688b6fbb655753d5980e1ba4428b1f49e6ba6ffe4fcb1c99941a0d32eb823ca85438c463f56668ad159f810935829aa3f7d5389f972f7ccf25607896e6d9f81445a1957f4636446fe0dceec90f9cda17919f424b056a79f921745817765f9bc0dabe99704588875506fe0175a0884056f80fce8cee501391e0d6a1830bab9e661543c4762f905425e2e0d78cbc7ce0f3c0041518de890ba47a50bb21139443f39dfb96b9a7c3c736cd9efc0f33169682faa5d1d30465ced21a388ba7fd1399c1ce4872446857a454d8be04af6756b81f1194300353d016bc15a775d3e4d3cef146d99872acd439cca27292deca90fc5002c5c2be5fcd00895f672bfb84f8dcff7b3e8c6141305d888e4c328f3a2380e08268e7821f8785a9215334585d1da5163aa87265f2c68dc5fec0370b1f6a1c482ebb16887ff5999502e1c45c733b79d014075a032fa7ca3b3fca9b0f2f97770ae611e8b2b1ff1090adf8c6646a61932ba18f0588ab6fd678be3a6f5133d2f673a4b522cdd4d96d235fe90d154938f7957c50f3c647801b6817dddd392d176e7823fca5ffa6fe52998f186650351a4304b98b677e3848f819e1bb045af90a66ba6508b45d1ed62729cc60c4951a968375313930256889e980aa66da5c68023a7454ad64082b6eaef7adacaff31ae704c6fb1c2b6a622745bfaf03b5cbe0d05f87d6918df09080a501d191d6ef3c43552b9422be5abc781010abc14fed9a7de01b6503d0545b807769ba0f68337ed0a20abe65eed289f0d8962664a136c7118d7aa2227e49163985d674a65647bde56121c2785e7a1848a7f6558bf183abcc3db9bbbcfbf9b49e90eea5d714f4514989e09555cd4d0904d4a89fc99d09f08aab7ae6118d5553c8086b93cc6c5bd46f7a4aac681917333c8783c2e0f24298e3dbef6bb5f08bf6c44f40c89074c413262cb31ab87beb35ea6d32767de275ec0f31d4a4fcd76de9b242198e39d37bb994cb4078ff78fae6a62c2d28ced6651d5bec7c85ffc61e757c1bca574ceae60806684fb8192393987f9390d885386b6ffbdbc5ca103509f36dccbf106a25c96023c3fc826d4a34b358b7739fcda00a05d3c54fd065f6c2c08b4b2a4837694c00333fae64d74738ac00d54f27bebed08937efb39fef6842a2a0aced3e9b3886099503d4533a952a1e4f052848078421d7b93564e78436be4819d2065d8187767b87cbb8f8481e3d2912261f3bd8664f18d2290b487dd8ecd58eaef6fcd421fa2795a0e5225876801be18d062bcbd88bc6f1b7a906c3f1980dcdd18964873d657e11b4eff6c5b81f32c0ff8f0a64a0a45c8a3012c5036b2deb457b1b2b3de24dd7803bd364aa8583dcc02b0053fd8b064eb0086ff69acc4dd453c98b1635e41f9d15f168cd78c60e9e90e533a8348518fe777e8b4b5d18ca91ea1923a93ed66d86b3ff9451328f6d52ec87ad7b15c41ed3c6de290536cb690bdb8284d46462bba08949f789018a5f4caa0cf5912394d14e3ba8945cc9df72a75af782fcd6b2d9b88efdeacfca59ca69e75f5bf1f4671856681dda66e12b26abc350d7ba1ff7c1642de5ca87a6dff336582a7ec8ad6e22f45ba331bbc89c7abda07be12ea40ce51fbadce870374f61dcae25d45b9e0ae90cb50f4308a0a18db9a1b702ad8212957127127a22643e0ae1b5c32715560ae832bbcb70acf1be6dbdc2afa5671f59f1ede56ac66892517532bfee1be5c946d2d782fa21e4f2ffd84be52bbfccbf585f76c9fab5d80fb200895bd78b6b09787c0379045c1ebd03bcd2eed1adc31cf9983e2a2a9944c7494eb5ff1d8fa08bb4c37db788a391289f7920940515e74e917eb29e0756287e31b10f3708ab52aac980178d06cef6502000db677463427c099cd8b68a60ae805c77f23aebd007344221d49353c8fb04d34d3835a76fc616bdc73c19659f47b116df7f6337f0a55b29fd95297db52f7d68a07f818273b531f96f55340a08090301487a92f0a29fed74961c0f6d7bd8d979f101889b63709324147f1089637e9dcbbfdcbfca000932a3ea4fa78cf9ff59228623b3bb21a89dcd856ffe73c3b8cb2fe77fe4e2eb7ecd6e71c317f1b343407f2703e0b5ebef06c36e6777681d7a5b721bb9d8eb578aa54b1e502d720178caa8c0cd5be53b12a86ff78eb869fb21d7dc367dd17edc1263c055236e3def9cb0f43494301b49cc82d88c43b98aec4d16ab7c394b9559137255df2ebb0efef1f5cb0504d9c21ee136ca679508f6d346bd5ebf91c09a1d98c79408135742d6bec64aee620c5d940fdda2c8d5d427a4fb8b72263abfe222848b34918e1a436bd6121a21ba01e70b540716ca86de2007b7badcb54a8b771496490348aafec966d1e876a8a37215ed7951c62c241afa3d4532a3e2d961e48c57d7ac7a7d9ceaf044a9c477832d97841f00f308173471139fde4c59de4e3284ce17bfc1e1132f2f8c5545ed88fac5108f8ab38e2b9f0062ea92a25cd529b5108afaefd02477bb71be1ce92bbd71da99d99d3abc4663a89565b6d489759182fb921d91a1b2592916ece0449af92d77e5fc6b54ae3a8e34a582ee2527f3824c00121355b00e3eda6fde4deef661640b62196bd1cba82970e70ea4f55460dc642e275ab3cee09a6414914a7930ad626e5d399160d3323ef0879e0714ffed809cfe20c3a1207f5d77b9cc9b0493ba3fd5c971150ae73096716be907c32a58c2ad3ab61d882e578dac1757d7bab81cbfeeb990a0e6dbff355f77e62e6068e38e421d21bb739bbf78e3f6421980db1881d1aaa3159fe994e33b31a15a8943dbbb1d3ce049fe893294eaa190087eccdb61c1e7b6c88715f6eb1b38328d9ebf80799d65fe0320d09d991ad93b6384a4e4718d25a4ae0e6ee0adda390f8adcc5eb8771e4cb7d878964d25da7ee883cf83d31b32b985fa2019f261de2e11cc8c37fdb18f5b36adc18c62c4178e501152907a96e3b07d682bc28775b55ca5068a8ce4dbb9507648a22f81a2be8b1b664c3b0461777d7965141874a9586eb6d81f7022b3f81c1fae684416f2e8d37933ba93009c96980f84fe5d90a49c5cf78173ddf5099e83cc6f538a23f946361b40cc8031be18e7180851d364e61f3d4b5964b78b6dc878125a8f932420c1d3e311cc375412351fbc484486fe71cdf81b53fba9bfba35635d8a62d03d84e1143bb7c4445c3c77244f7138467539ba15b6dbdc95752755730b9113213bf52ed21a8364132956616b6c53045eb98d6600bde465e05c9fee4fd50298b0bca9d1fe3d3015ff3820c90e5bf859fbed5e6fd853be11b466fb5824257218414ce55a937260950be44eba78066f908b7c68e2c0b885dea52bdbaf835f6a7a634e3e91971b37c2519a9e695324121d186a1b0909f8640da543241a9946838039bb060826630087a2479113bec16a921137615b07b5dba2f2b7c09dc7dd5a95e23b4792712be6e79a2eab2b2540e919d621326a20756096da4684909e8254f65b89b62f23e4ee544aee7141618e2f8db3823c9aa2553310a43113f43159ce504a5e6a0e97a8648fafa71c5156c3fc0d7c37544371807e6d406f2fd7d90cc256b12146af2781525d989460c06f8169510677336391b811119d074b288d12a60f0bdce8e197a8bba5edfd773a1fa9d3abe6f46fc3f7a6d17dc1b11beecd9e348b734a87677050407bd7c07566c4aca6c177030078837d6e689ca5baaeaaba03696a1d2a0ca8f8f2c425bdfe25ea7446587540f1df8a34d7968ad8a8eb212bacb85a4e3489e19dc7f7d0c075ed9093769d72ab892419e2ff487553d6fc4a6c92e6f4e54eefab29086c2d899b810b3ff92d1d67f0944787b663dc65e7fb917de308ab88dfcd8586c19b9b3bce021a03966d6af4d224e60bf46e86fed68d610ff663a4b66b0013d60fc61130d7bc03c6581be0eefac706292c3274a935901db6178631658d8a5eb25cfe9f0e8806ffe15ea5cb973073fa80f619e9065cd8d2ba110c8527491746a3745865bf3c6ae4c5672cfd8daad0fcfb9455659832da979a1ca3d96bd5740faf6b15ca0e28302e3ec68b00acf4ad1e4c3ce5f10f25f87255bfc80d7c21e28306e17191f307161afdce6212e7833aba8d6ee320c59c4e0afd1d07052f22e00cba5ad6deab91b74729859895b8ae0cedafaf7c5edc189a1302abc7ea67f62ca68a77fb2cc41e5ef2b9fd1e636dd80fa82107bd87f9292ee075aa6c7b4bf997af8f4a180e7adf3b2fa38afb72b681e9b5f98466decf5667589d83d028610cf887f68396a61812955ecb92179b060162c5ef78f27de1ceaf896e5c4a5738717bf2ed00b6612fc45ae0f6cfedb763dfadffbf592745239f269944d7ba2f71b66468e8d530f86a47be670247d48eb1b1eb6c89b4189989b36dc4a315a18b679c4289617b440c71e9899e939788eb3dbf47047e1cab74e9e6014ce09587bc475c2c3e7099d57a51cf8589ebb6c64f30efb39aa4288e88dd2b8438b10cca3f0bc92ad376335ce0980fbbe7de98f3fb74e31a86de382c87ea9a6f458bb508d32d101e6d2e1b873cd432dd46b9c422cafad089aa04f31490e762b9090623573b9d6a7108aaf53d7b861f139326de1fad6d1b73dc8715d4e0a765f056dc6be539a73073778de1652754ace6facf3b067bb18516eb873f08ea7d146cf1e1b296fce9f5bc9bce4b968c1962c9df728b69a247dcc8f3a940ed2c491b65c8c40f6b6697215534b15ae4630325a92a2fb232bef196ac705d475c3fdee7a8ce6d65ec8ae9c1d5b17c4fd5596135b7341ccf0680862e926bb593ffed3212073fb619d8ee78b80e09517cbbba0cf0d5f29b96511efccb56ad248a82ebd72aa24f9ae83bed884836671efc8e3db5480059afee0a57d9ecc61677db98f5137297460482726fd0f8e2c9e1e3f22ab02ab89e1c16b5b5d7da3e5aaa141c8652dcb5330681d19eecdd63909b868507a80d8db6d768464ebec8250e778e15f307d41a00a03de34ec04d283e275df470825ebd29ec75019de7b41e13270a30314ffecff99697257e61ee3ba153726bdd08cc0716ef002604c4f99ded938bd38fa538534f79df06b5abdf8c484db14f67fb744b1953cf7221f880e74ec92839a3b96a7e46bdffeaa3bbfa2e9303f3fd7442644674607500f29c5c87b52a6ecdb71810cf158057164f01f2217f7c7c051fb19cf2fe0f93d13cbe16b7bd6288b1df49238a2aca55b5c2c551243f825582ed238591a4876f76fdaf63b4b01b378617e1230ca37f417961e41c762781bbd80aeead112aed8d6da01f17fd60d69d68ec00c177a92393c30d120408bef48f8e6e55e85690e9ccc1028ea07807b91a0f62232c463ec391974217d99b9b31c46ebdf2b3cbe8a9a4295821ead4066653e5ef0ae1a438dee5582ebdf6114c3ebe4714742d3589cdb952105efb9840946813434fb1d51d3a463bb36f360238d2d0f769aec8db7a1d998c63c11fac036e12a1f6cdfbdb1775490919526c0875302e5f8e50a0554d81c46b9c28d2d5a5c20cee6a88af5638270771faf848f85600c0ead729e1e031a0fa095e1bcae5cac05", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:55 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) 20:46:55 executing program 5: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, "ffbe3ebcd2193c000143581d7f5e9883a8d0dd3b0af0e7cae7c0fed0f40b0118650117c2230000000000030000ffffff17504bdc00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8401, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 20:46:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_coalesce={0x7}}) 20:46:56 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x325, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0x8}, @void}}}, 0x24}}, 0x0) 20:46:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) [ 1443.953105] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1443.956725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.969508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1443.974454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.001452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.039260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.080089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1444.442130] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1444.461170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.478026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.499314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.527981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) 20:46:56 executing program 1: fspick(0xffffffffffffffff, 0x0, 0x8) 20:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x2e, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="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", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x1d}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:56 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume_offset', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) 20:46:56 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') close(r0) [ 1444.804300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1444.807680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="49a2638fc9b15cc08910be4e590140eba8f49fb06fe9246a974a584119f1688b6fbb655753d5980e1ba4428b1f49e6ba6ffe4fcb1c99941a0d32eb823ca85438c463f56668ad159f810935829aa3f7d5389f972f7ccf25607896e6d9f81445a1957f4636446fe0dceec90f9cda17919f424b056a79f921745817765f9bc0dabe99704588875506fe0175a0884056f80fce8cee501391e0d6a1830bab9e661543c4762f905425e2e0d78cbc7ce0f3c0041518de890ba47a50bb21139443f39dfb96b9a7c3c736cd9efc0f33169682faa5d1d30465ced21a388ba7fd1399c1ce4872446857a454d8be04af6756b81f1194300353d016bc15a775d3e4d3cef146d99872acd439cca27292deca90fc5002c5c2be5fcd00895f672bfb84f8dcff7b3e8c6141305d888e4c328f3a2380e08268e7821f8785a9215334585d1da5163aa87265f2c68dc5fec0370b1f6a1c482ebb16887ff5999502e1c45c733b79d014075a032fa7ca3b3fca9b0f2f97770ae611e8b2b1ff1090adf8c6646a61932ba18f0588ab6fd678be3a6f5133d2f673a4b522cdd4d96d235fe90d154938f7957c50f3c647801b6817dddd392d176e7823fca5ffa6fe52998f186650351a4304b98b677e3848f819e1bb045af90a66ba6508b45d1ed62729cc60c4951a968375313930256889e980aa66da5c68023a7454ad64082b6eaef7adacaff31ae704c6fb1c2b6a622745bfaf03b5cbe0d05f87d6918df09080a501d191d6ef3c43552b9422be5abc781010abc14fed9a7de01b6503d0545b807769ba0f68337ed0a20abe65eed289f0d8962664a136c7118d7aa2227e49163985d674a65647bde56121c2785e7a1848a7f6558bf183abcc3db9bbbcfbf9b49e90eea5d714f4514989e09555cd4d0904d4a89fc99d09f08aab7ae6118d5553c8086b93cc6c5bd46f7a4aac681917333c8783c2e0f24298e3dbef6bb5f08bf6c44f40c89074c413262cb31ab87beb35ea6d32767de275ec0f31d4a4fcd76de9b242198e39d37bb994cb4078ff78fae6a62c2d28ced6651d5bec7c85ffc61e757c1bca574ceae60806684fb8192393987f9390d885386b6ffbdbc5ca103509f36dccbf106a25c96023c3fc826d4a34b358b7739fcda00a05d3c54fd065f6c2c08b4b2a4837694c00333fae64d74738ac00d54f27bebed08937efb39fef6842a2a0aced3e9b3886099503d4533a952a1e4f052848078421d7b93564e78436be4819d2065d8187767b87cbb8f8481e3d2912261f3bd8664f18d2290b487dd8ecd58eaef6fcd421fa2795a0e5225876801be18d062bcbd88bc6f1b7a906c3f1980dcdd18964873d657e11b4eff6c5b81f32c0ff8f0a64a0a45c8a3012c5036b2deb457b1b2b3de24dd7803bd364aa8583dcc02b0053fd8b064eb0086ff69acc4dd453c98b1635e41f9d15f168cd78c60e9e90e533a8348518fe777e8b4b5d18ca91ea1923a93ed66d86b3ff9451328f6d52ec87ad7b15c41ed3c6de290536cb690bdb8284d46462bba08949f789018a5f4caa0cf5912394d14e3ba8945cc9df72a75af782fcd6b2d9b88efdeacfca59ca69e75f5bf1f4671856681dda66e12b26abc350d7ba1ff7c1642de5ca87a6dff336582a7ec8ad6e22f45ba331bbc89c7abda07be12ea40ce51fbadce870374f61dcae25d45b9e0ae90cb50f4308a0a18db9a1b702ad8212957127127a22643e0ae1b5c32715560ae832bbcb70acf1be6dbdc2afa5671f59f1ede56ac66892517532bfee1be5c946d2d782fa21e4f2ffd84be52bbfccbf585f76c9fab5d80fb200895bd78b6b09787c0379045c1ebd03bcd2eed1adc31cf9983e2a2a9944c7494eb5ff1d8fa08bb4c37db788a391289f7920940515e74e917eb29e0756287e31b10f3708ab52aac980178d06cef6502000db677463427c099cd8b68a60ae805c77f23aebd007344221d49353c8fb04d34d3835a76fc616bdc73c19659f47b116df7f6337f0a55b29fd95297db52f7d68a07f818273b531f96f55340a08090301487a92f0a29fed74961c0f6d7bd8d979f101889b63709324147f1089637e9dcbbfdcbfca000932a3ea4fa78cf9ff59228623b3bb21a89dcd856ffe73c3b8cb2fe77fe4e2eb7ecd6e71c317f1b343407f2703e0b5ebef06c36e6777681d7a5b721bb9d8eb578aa54b1e502d720178caa8c0cd5be53b12a86ff78eb869fb21d7dc367dd17edc1263c055236e3def9cb0f43494301b49cc82d88c43b98aec4d16ab7c394b9559137255df2ebb0efef1f5cb0504d9c21ee136ca679508f6d346bd5ebf91c09a1d98c79408135742d6bec64aee620c5d940fdda2c8d5d427a4fb8b72263abfe222848b34918e1a436bd6121a21ba01e70b540716ca86de2007b7badcb54a8b771496490348aafec966d1e876a8a37215ed7951c62c241afa3d4532a3e2d961e48c57d7ac7a7d9ceaf044a9c477832d97841f00f308173471139fde4c59de4e3284ce17bfc1e1132f2f8c5545ed88fac5108f8ab38e2b9f0062ea92a25cd529b5108afaefd02477bb71be1ce92bbd71da99d99d3abc4663a89565b6d489759182fb921d91a1b2592916ece0449af92d77e5fc6b54ae3a8e34a582ee2527f3824c00121355b00e3eda6fde4deef661640b62196bd1cba82970e70ea4f55460dc642e275ab3cee09a6414914a7930ad626e5d399160d3323ef0879e0714ffed809cfe20c3a1207f5d77b9cc9b0493ba3fd5c971150ae73096716be907c32a58c2ad3ab61d882e578dac1757d7bab81cbfeeb990a0e6dbff355f77e62e6068e38e421d21bb739bbf78e3f6421980db1881d1aaa3159fe994e33b31a15a8943dbbb1d3ce049fe893294eaa190087eccdb61c1e7b6c88715f6eb1b38328d9ebf80799d65fe0320d09d991ad93b6384a4e4718d25a4ae0e6ee0adda390f8adcc5eb8771e4cb7d878964d25da7ee883cf83d31b32b985fa2019f261de2e11cc8c37fdb18f5b36adc18c62c4178e501152907a96e3b07d682bc28775b55ca5068a8ce4dbb9507648a22f81a2be8b1b664c3b0461777d7965141874a9586eb6d81f7022b3f81c1fae684416f2e8d37933ba93009c96980f84fe5d90a49c5cf78173ddf5099e83cc6f538a23f946361b40cc8031be18e7180851d364e61f3d4b5964b78b6dc878125a8f932420c1d3e311cc375412351fbc484486fe71cdf81b53fba9bfba35635d8a62d03d84e1143bb7c4445c3c77244f7138467539ba15b6dbdc95752755730b9113213bf52ed21a8364132956616b6c53045eb98d6600bde465e05c9fee4fd50298b0bca9d1fe3d3015ff3820c90e5bf859fbed5e6fd853be11b466fb5824257218414ce55a937260950be44eba78066f908b7c68e2c0b885dea52bdbaf835f6a7a634e3e91971b37c2519a9e695324121d186a1b0909f8640da543241a9946838039bb060826630087a2479113bec16a921137615b07b5dba2f2b7c09dc7dd5a95e23b4792712be6e79a2eab2b2540e919d621326a20756096da4684909e8254f65b89b62f23e4ee544aee7141618e2f8db3823c9aa2553310a43113f43159ce504a5e6a0e97a8648fafa71c5156c3fc0d7c37544371807e6d406f2fd7d90cc256b12146af2781525d989460c06f8169510677336391b811119d074b288d12a60f0bdce8e197a8bba5edfd773a1fa9d3abe6f46fc3f7a6d17dc1b11beecd9e348b734a87677050407bd7c07566c4aca6c177030078837d6e689ca5baaeaaba03696a1d2a0ca8f8f2c425bdfe25ea7446587540f1df8a34d7968ad8a8eb212bacb85a4e3489e19dc7f7d0c075ed9093769d72ab892419e2ff487553d6fc4a6c92e6f4e54eefab29086c2d899b810b3ff92d1d67f0944787b663dc65e7fb917de308ab88dfcd8586c19b9b3bce021a03966d6af4d224e60bf46e86fed68d610ff663a4b66b0013d60fc61130d7bc03c6581be0eefac706292c3274a935901db6178631658d8a5eb25cfe9f0e8806ffe15ea5cb973073fa80f619e9065cd8d2ba110c8527491746a3745865bf3c6ae4c5672cfd8daad0fcfb9455659832da979a1ca3d96bd5740faf6b15ca0e28302e3ec68b00acf4ad1e4c3ce5f10f25f87255bfc80d7c21e28306e17191f307161afdce6212e7833aba8d6ee320c59c4e0afd1d07052f22e00cba5ad6deab91b74729859895b8ae0cedafaf7c5edc189a1302abc7ea67f62ca68a77fb2cc41e5ef2b9fd1e636dd80fa82107bd87f9292ee075aa6c7b4bf997af8f4a180e7adf3b2fa38afb72b681e9b5f98466decf5667589d83d028610cf887f68396a61812955ecb92179b060162c5ef78f27de1ceaf896e5c4a5738717bf2ed00b6612fc45ae0f6cfedb763dfadffbf592745239f269944d7ba2f71b66468e8d530f86a47be670247d48eb1b1eb6c89b4189989b36dc4a315a18b679c4289617b440c71e9899e939788eb3dbf47047e1cab74e9e6014ce09587bc475c2c3e7099d57a51cf8589ebb6c64f30efb39aa4288e88dd2b8438b10cca3f0bc92ad376335ce0980fbbe7de98f3fb74e31a86de382c87ea9a6f458bb508d32d101e6d2e1b873cd432dd46b9c422cafad089aa04f31490e762b9090623573b9d6a7108aaf53d7b861f139326de1fad6d1b73dc8715d4e0a765f056dc6be539a73073778de1652754ace6facf3b067bb18516eb873f08ea7d146cf1e1b296fce9f5bc9bce4b968c1962c9df728b69a247dcc8f3a940ed2c491b65c8c40f6b6697215534b15ae4630325a92a2fb232bef196ac705d475c3fdee7a8ce6d65ec8ae9c1d5b17c4fd5596135b7341ccf0680862e926bb593ffed3212073fb619d8ee78b80e09517cbbba0cf0d5f29b96511efccb56ad248a82ebd72aa24f9ae83bed884836671efc8e3db5480059afee0a57d9ecc61677db98f5137297460482726fd0f8e2c9e1e3f22ab02ab89e1c16b5b5d7da3e5aaa141c8652dcb5330681d19eecdd63909b868507a80d8db6d768464ebec8250e778e15f307d41a00a03de34ec04d283e275df470825ebd29ec75019de7b41e13270a30314ffecff99697257e61ee3ba153726bdd08cc0716ef002604c4f99ded938bd38fa538534f79df06b5abdf8c484db14f67fb744b1953cf7221f880e74ec92839a3b96a7e46bdffeaa3bbfa2e9303f3fd7442644674607500f29c5c87b52a6ecdb71810cf158057164f01f2217f7c7c051fb19cf2fe0f93d13cbe16b7bd6288b1df49238a2aca55b5c2c551243f825582ed238591a4876f76fdaf63b4b01b378617e1230ca37f417961e41c762781bbd80aeead112aed8d6da01f17fd60d69d68ec00c177a92393c30d120408bef48f8e6e55e85690e9ccc1028ea07807b91a0f62232c463ec391974217d99b9b31c46ebdf2b3cbe8a9a4295821ead4066653e5ef0ae1a438dee5582ebdf6114c3ebe4714742d3589cdb952105efb9840946813434fb1d51d3a463bb36f360238d2d0f769aec8db7a1d998c63c11fac036e12a1f6cdfbdb1775490919526c0875302e5f8e50a0554d81c46b9c28d2d5a5c20cee6a88af5638270771faf848f85600c0ead729e1e031a0fa095e1bcae5cac05", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1444.842910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1444.870109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') close(r0) [ 1444.915190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) [ 1444.929693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 5: r0 = gettid() setpriority(0x1, r0, 0x0) 20:46:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000002e40), 0x0, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7ffff000}], 0x1) [ 1444.970424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') close(r0) [ 1445.235447] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1445.240064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.290684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.306943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1445.358085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:58 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x15, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000e1f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38343433353034323400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000047878d126f6347e1b360d317cdb2f98e010040000c00000000000000e1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f0003000400"/32, 0x20, 0x1000}, {&(0x7f0000010400)="ff07ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e1f4655fe1f4655fe1f4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012500)="ed41000000100000e1f4655fe1f4655fe1f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4080}, {&(0x7f0000012600)="8081000000c04000e1f4655fe1f4655fe1f4655f000000000000010080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000100"/128, 0x80, 0x4300}, {&(0x7f0000012700)="c041000000400000e1f4655fe1f4655fe1f4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4500}, {&(0x7f0000012800)="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"/768, 0x300, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012c00)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000012d00)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000012e00)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000012f00)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013000)="504d4d00504d4dffe2f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x40000}, {&(0x7f0000013100)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000013200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000013700)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000013800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f80f0000000006000000779b539778617474723100000601f00f00000000060000007498539778617474723200"/96, 0x60, 0x80000}, {&(0x7f0000013900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x80fe0}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xa0000}], 0x0, &(0x7f0000013b00)) 20:46:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0x69, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) timerfd_gettime(0xffffffffffffffff, 0x0) 20:46:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000004c80)) 20:46:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x60}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="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", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:46:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') close(r0) 20:46:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="49a2638fc9b15cc08910be4e590140eba8f49fb06fe9246a974a584119f1688b6fbb655753d5980e1ba4428b1f49e6ba6ffe4fcb1c99941a0d32eb823ca85438c463f56668ad159f810935829aa3f7d5389f972f7ccf25607896e6d9f81445a1957f4636446fe0dceec90f9cda17919f424b056a79f921745817765f9bc0dabe99704588875506fe0175a0884056f80fce8cee501391e0d6a1830bab9e661543c4762f905425e2e0d78cbc7ce0f3c0041518de890ba47a50bb21139443f39dfb96b9a7c3c736cd9efc0f33169682faa5d1d30465ced21a388ba7fd1399c1ce4872446857a454d8be04af6756b81f1194300353d016bc15a775d3e4d3cef146d99872acd439cca27292deca90fc5002c5c2be5fcd00895f672bfb84f8dcff7b3e8c6141305d888e4c328f3a2380e08268e7821f8785a9215334585d1da5163aa87265f2c68dc5fec0370b1f6a1c482ebb16887ff5999502e1c45c733b79d014075a032fa7ca3b3fca9b0f2f97770ae611e8b2b1ff1090adf8c6646a61932ba18f0588ab6fd678be3a6f5133d2f673a4b522cdd4d96d235fe90d154938f7957c50f3c647801b6817dddd392d176e7823fca5ffa6fe52998f186650351a4304b98b677e3848f819e1bb045af90a66ba6508b45d1ed62729cc60c4951a968375313930256889e980aa66da5c68023a7454ad64082b6eaef7adacaff31ae704c6fb1c2b6a622745bfaf03b5cbe0d05f87d6918df09080a501d191d6ef3c43552b9422be5abc781010abc14fed9a7de01b6503d0545b807769ba0f68337ed0a20abe65eed289f0d8962664a136c7118d7aa2227e49163985d674a65647bde56121c2785e7a1848a7f6558bf183abcc3db9bbbcfbf9b49e90eea5d714f4514989e09555cd4d0904d4a89fc99d09f08aab7ae6118d5553c8086b93cc6c5bd46f7a4aac681917333c8783c2e0f24298e3dbef6bb5f08bf6c44f40c89074c413262cb31ab87beb35ea6d32767de275ec0f31d4a4fcd76de9b242198e39d37bb994cb4078ff78fae6a62c2d28ced6651d5bec7c85ffc61e757c1bca574ceae60806684fb8192393987f9390d885386b6ffbdbc5ca103509f36dccbf106a25c96023c3fc826d4a34b358b7739fcda00a05d3c54fd065f6c2c08b4b2a4837694c00333fae64d74738ac00d54f27bebed08937efb39fef6842a2a0aced3e9b3886099503d4533a952a1e4f052848078421d7b93564e78436be4819d2065d8187767b87cbb8f8481e3d2912261f3bd8664f18d2290b487dd8ecd58eaef6fcd421fa2795a0e5225876801be18d062bcbd88bc6f1b7a906c3f1980dcdd18964873d657e11b4eff6c5b81f32c0ff8f0a64a0a45c8a3012c5036b2deb457b1b2b3de24dd7803bd364aa8583dcc02b0053fd8b064eb0086ff69acc4dd453c98b1635e41f9d15f168cd78c60e9e90e533a8348518fe777e8b4b5d18ca91ea1923a93ed66d86b3ff9451328f6d52ec87ad7b15c41ed3c6de290536cb690bdb8284d46462bba08949f789018a5f4caa0cf5912394d14e3ba8945cc9df72a75af782fcd6b2d9b88efdeacfca59ca69e75f5bf1f4671856681dda66e12b26abc350d7ba1ff7c1642de5ca87a6dff336582a7ec8ad6e22f45ba331bbc89c7abda07be12ea40ce51fbadce870374f61dcae25d45b9e0ae90cb50f4308a0a18db9a1b702ad8212957127127a22643e0ae1b5c32715560ae832bbcb70acf1be6dbdc2afa5671f59f1ede56ac66892517532bfee1be5c946d2d782fa21e4f2ffd84be52bbfccbf585f76c9fab5d80fb200895bd78b6b09787c0379045c1ebd03bcd2eed1adc31cf9983e2a2a9944c7494eb5ff1d8fa08bb4c37db788a391289f7920940515e74e917eb29e0756287e31b10f3708ab52aac980178d06cef6502000db677463427c099cd8b68a60ae805c77f23aebd007344221d49353c8fb04d34d3835a76fc616bdc73c19659f47b116df7f6337f0a55b29fd95297db52f7d68a07f818273b531f96f55340a08090301487a92f0a29fed74961c0f6d7bd8d979f101889b63709324147f1089637e9dcbbfdcbfca000932a3ea4fa78cf9ff59228623b3bb21a89dcd856ffe73c3b8cb2fe77fe4e2eb7ecd6e71c317f1b343407f2703e0b5ebef06c36e6777681d7a5b721bb9d8eb578aa54b1e502d720178caa8c0cd5be53b12a86ff78eb869fb21d7dc367dd17edc1263c055236e3def9cb0f43494301b49cc82d88c43b98aec4d16ab7c394b9559137255df2ebb0efef1f5cb0504d9c21ee136ca679508f6d346bd5ebf91c09a1d98c79408135742d6bec64aee620c5d940fdda2c8d5d427a4fb8b72263abfe222848b34918e1a436bd6121a21ba01e70b540716ca86de2007b7badcb54a8b771496490348aafec966d1e876a8a37215ed7951c62c241afa3d4532a3e2d961e48c57d7ac7a7d9ceaf044a9c477832d97841f00f308173471139fde4c59de4e3284ce17bfc1e1132f2f8c5545ed88fac5108f8ab38e2b9f0062ea92a25cd529b5108afaefd02477bb71be1ce92bbd71da99d99d3abc4663a89565b6d489759182fb921d91a1b2592916ece0449af92d77e5fc6b54ae3a8e34a582ee2527f3824c00121355b00e3eda6fde4deef661640b62196bd1cba82970e70ea4f55460dc642e275ab3cee09a6414914a7930ad626e5d399160d3323ef0879e0714ffed809cfe20c3a1207f5d77b9cc9b0493ba3fd5c971150ae73096716be907c32a58c2ad3ab61d882e578dac1757d7bab81cbfeeb990a0e6dbff355f77e62e6068e38e421d21bb739bbf78e3f6421980db1881d1aaa3159fe994e33b31a15a8943dbbb1d3ce049fe893294eaa190087eccdb61c1e7b6c88715f6eb1b38328d9ebf80799d65fe0320d09d991ad93b6384a4e4718d25a4ae0e6ee0adda390f8adcc5eb8771e4cb7d878964d25da7ee883cf83d31b32b985fa2019f261de2e11cc8c37fdb18f5b36adc18c62c4178e501152907a96e3b07d682bc28775b55ca5068a8ce4dbb9507648a22f81a2be8b1b664c3b0461777d7965141874a9586eb6d81f7022b3f81c1fae684416f2e8d37933ba93009c96980f84fe5d90a49c5cf78173ddf5099e83cc6f538a23f946361b40cc8031be18e7180851d364e61f3d4b5964b78b6dc878125a8f932420c1d3e311cc375412351fbc484486fe71cdf81b53fba9bfba35635d8a62d03d84e1143bb7c4445c3c77244f7138467539ba15b6dbdc95752755730b9113213bf52ed21a8364132956616b6c53045eb98d6600bde465e05c9fee4fd50298b0bca9d1fe3d3015ff3820c90e5bf859fbed5e6fd853be11b466fb5824257218414ce55a937260950be44eba78066f908b7c68e2c0b885dea52bdbaf835f6a7a634e3e91971b37c2519a9e695324121d186a1b0909f8640da543241a9946838039bb060826630087a2479113bec16a921137615b07b5dba2f2b7c09dc7dd5a95e23b4792712be6e79a2eab2b2540e919d621326a20756096da4684909e8254f65b89b62f23e4ee544aee7141618e2f8db3823c9aa2553310a43113f43159ce504a5e6a0e97a8648fafa71c5156c3fc0d7c37544371807e6d406f2fd7d90cc256b12146af2781525d989460c06f8169510677336391b811119d074b288d12a60f0bdce8e197a8bba5edfd773a1fa9d3abe6f46fc3f7a6d17dc1b11beecd9e348b734a87677050407bd7c07566c4aca6c177030078837d6e689ca5baaeaaba03696a1d2a0ca8f8f2c425bdfe25ea7446587540f1df8a34d7968ad8a8eb212bacb85a4e3489e19dc7f7d0c075ed9093769d72ab892419e2ff487553d6fc4a6c92e6f4e54eefab29086c2d899b810b3ff92d1d67f0944787b663dc65e7fb917de308ab88dfcd8586c19b9b3bce021a03966d6af4d224e60bf46e86fed68d610ff663a4b66b0013d60fc61130d7bc03c6581be0eefac706292c3274a935901db6178631658d8a5eb25cfe9f0e8806ffe15ea5cb973073fa80f619e9065cd8d2ba110c8527491746a3745865bf3c6ae4c5672cfd8daad0fcfb9455659832da979a1ca3d96bd5740faf6b15ca0e28302e3ec68b00acf4ad1e4c3ce5f10f25f87255bfc80d7c21e28306e17191f307161afdce6212e7833aba8d6ee320c59c4e0afd1d07052f22e00cba5ad6deab91b74729859895b8ae0cedafaf7c5edc189a1302abc7ea67f62ca68a77fb2cc41e5ef2b9fd1e636dd80fa82107bd87f9292ee075aa6c7b4bf997af8f4a180e7adf3b2fa38afb72b681e9b5f98466decf5667589d83d028610cf887f68396a61812955ecb92179b060162c5ef78f27de1ceaf896e5c4a5738717bf2ed00b6612fc45ae0f6cfedb763dfadffbf592745239f269944d7ba2f71b66468e8d530f86a47be670247d48eb1b1eb6c89b4189989b36dc4a315a18b679c4289617b440c71e9899e939788eb3dbf47047e1cab74e9e6014ce09587bc475c2c3e7099d57a51cf8589ebb6c64f30efb39aa4288e88dd2b8438b10cca3f0bc92ad376335ce0980fbbe7de98f3fb74e31a86de382c87ea9a6f458bb508d32d101e6d2e1b873cd432dd46b9c422cafad089aa04f31490e762b9090623573b9d6a7108aaf53d7b861f139326de1fad6d1b73dc8715d4e0a765f056dc6be539a73073778de1652754ace6facf3b067bb18516eb873f08ea7d146cf1e1b296fce9f5bc9bce4b968c1962c9df728b69a247dcc8f3a940ed2c491b65c8c40f6b6697215534b15ae4630325a92a2fb232bef196ac705d475c3fdee7a8ce6d65ec8ae9c1d5b17c4fd5596135b7341ccf0680862e926bb593ffed3212073fb619d8ee78b80e09517cbbba0cf0d5f29b96511efccb56ad248a82ebd72aa24f9ae83bed884836671efc8e3db5480059afee0a57d9ecc61677db98f5137297460482726fd0f8e2c9e1e3f22ab02ab89e1c16b5b5d7da3e5aaa141c8652dcb5330681d19eecdd63909b868507a80d8db6d768464ebec8250e778e15f307d41a00a03de34ec04d283e275df470825ebd29ec75019de7b41e13270a30314ffecff99697257e61ee3ba153726bdd08cc0716ef002604c4f99ded938bd38fa538534f79df06b5abdf8c484db14f67fb744b1953cf7221f880e74ec92839a3b96a7e46bdffeaa3bbfa2e9303f3fd7442644674607500f29c5c87b52a6ecdb71810cf158057164f01f2217f7c7c051fb19cf2fe0f93d13cbe16b7bd6288b1df49238a2aca55b5c2c551243f825582ed238591a4876f76fdaf63b4b01b378617e1230ca37f417961e41c762781bbd80aeead112aed8d6da01f17fd60d69d68ec00c177a92393c30d120408bef48f8e6e55e85690e9ccc1028ea07807b91a0f62232c463ec391974217d99b9b31c46ebdf2b3cbe8a9a4295821ead4066653e5ef0ae1a438dee5582ebdf6114c3ebe4714742d3589cdb952105efb9840946813434fb1d51d3a463bb36f360238d2d0f769aec8db7a1d998c63c11fac036e12a1f6cdfbdb1775490919526c0875302e5f8e50a0554d81c46b9c28d2d5a5c20cee6a88af5638270771faf848f85600c0ead729e1e031a0fa095e1bcae5cac05", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1446.387660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.405522] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1446.423201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:58 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f0000010000)="601c6d6b646f736606ecb500080801000440040000f801", 0x17}, {&(0x7f0000000440)="602e7fef0fadcfee678069630183d3dccd51435e089e2da2f1afbd4f590d2a277f1e2ea8e173201c7e383e0dd60f0e19e5dd75345aa5026a7d89078e0f40055ab6a19647ddfd8160b6dbb7fb55053568c4ae94a020cc15fbbf473b1238de4442626a86bb4ccf39d850890aeb36548896cb9d3038a82e98a8e2d1d59bfd4b209f220a4d3252ad17be2c55312e2aec28db88c8712826b44c48255c3a83a70db5b0e28c70653f811a405c0fc2f9f1519734b6868e7271bde85c0a36eecd4351df5722aade19931d8edeb5626aa9bb763fcf936d0ef7a2583d5b2d3fecf8928b972aeb81bd7bfc5438bb1efbdc26d432c60bac77e9", 0xf3, 0x9db7}], 0x0, &(0x7f0000000100)={[{@shortname_lower}]}) openat$incfs(r0, &(0x7f0000000240)='.pending_reads\x00', 0x140, 0x0) 20:46:58 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa43, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/dev/sr0'], &(0x7f00000000c0)='./file1\x00', 0x0, 0x209000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x0, {0x0, 0x0, 0x0, 0x3734}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x5393, &(0x7f0000000000)) 20:46:58 executing program 7: syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x10, 0x3a, 0x0, @local, @mcast2={0xff, 0x10}, {[], @ndisc_ra}}}}}, 0x0) [ 1446.468219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.487103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:58 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_COOKIE(r0, 0x1, 0x19, 0x0, &(0x7f0000004500)) [ 1446.540976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.544467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa4400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) 20:46:58 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) [ 1446.859528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1446.868628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.875302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.967741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.971133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:46:59 executing program 6: capset(&(0x7f0000000980)={0x20071026}, &(0x7f00000009c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8}) 20:46:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x18, 0xee01, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee01}]}]}, 0x28}}, 0x0) 20:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x2e, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:46:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1447.329088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.377501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.406921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.434975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.463199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.492638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.843138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.858020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.892619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.902046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:01 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 20:47:01 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 20:47:01 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x3) 20:47:01 executing program 5: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x69, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:01 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="49a2638fc9b15cc08910be4e590140eba8f49fb06fe9246a974a584119f1688b6fbb655753d5980e1ba4428b1f49e6ba6ffe4fcb1c99941a0d32eb823ca85438c463f56668ad159f810935829aa3f7d5389f972f7ccf25607896e6d9f81445a1957f4636446fe0dceec90f9cda17919f424b056a79f921745817765f9bc0dabe99704588875506fe0175a0884056f80fce8cee501391e0d6a1830bab9e661543c4762f905425e2e0d78cbc7ce0f3c0041518de890ba47a50bb21139443f39dfb96b9a7c3c736cd9efc0f33169682faa5d1d30465ced21a388ba7fd1399c1ce4872446857a454d8be04af6756b81f1194300353d016bc15a775d3e4d3cef146d99872acd439cca27292deca90fc5002c5c2be5fcd00895f672bfb84f8dcff7b3e8c6141305d888e4c328f3a2380e08268e7821f8785a9215334585d1da5163aa87265f2c68dc5fec0370b1f6a1c482ebb16887ff5999502e1c45c733b79d014075a032fa7ca3b3fca9b0f2f97770ae611e8b2b1ff1090adf8c6646a61932ba18f0588ab6fd678be3a6f5133d2f673a4b522cdd4d96d235fe90d154938f7957c50f3c647801b6817dddd392d176e7823fca5ffa6fe52998f186650351a4304b98b677e3848f819e1bb045af90a66ba6508b45d1ed62729cc60c4951a968375313930256889e980aa66da5c68023a7454ad64082b6eaef7adacaff31ae704c6fb1c2b6a622745bfaf03b5cbe0d05f87d6918df09080a501d191d6ef3c43552b9422be5abc781010abc14fed9a7de01b6503d0545b807769ba0f68337ed0a20abe65eed289f0d8962664a136c7118d7aa2227e49163985d674a65647bde56121c2785e7a1848a7f6558bf183abcc3db9bbbcfbf9b49e90eea5d714f4514989e09555cd4d0904d4a89fc99d09f08aab7ae6118d5553c8086b93cc6c5bd46f7a4aac681917333c8783c2e0f24298e3dbef6bb5f08bf6c44f40c89074c413262cb31ab87beb35ea6d32767de275ec0f31d4a4fcd76de9b242198e39d37bb994cb4078ff78fae6a62c2d28ced6651d5bec7c85ffc61e757c1bca574ceae60806684fb8192393987f9390d885386b6ffbdbc5ca103509f36dccbf106a25c96023c3fc826d4a34b358b7739fcda00a05d3c54fd065f6c2c08b4b2a4837694c00333fae64d74738ac00d54f27bebed08937efb39fef6842a2a0aced3e9b3886099503d4533a952a1e4f052848078421d7b93564e78436be4819d2065d8187767b87cbb8f8481e3d2912261f3bd8664f18d2290b487dd8ecd58eaef6fcd421fa2795a0e5225876801be18d062bcbd88bc6f1b7a906c3f1980dcdd18964873d657e11b4eff6c5b81f32c0ff8f0a64a0a45c8a3012c5036b2deb457b1b2b3de24dd7803bd364aa8583dcc02b0053fd8b064eb0086ff69acc4dd453c98b1635e41f9d15f168cd78c60e9e90e533a8348518fe777e8b4b5d18ca91ea1923a93ed66d86b3ff9451328f6d52ec87ad7b15c41ed3c6de290536cb690bdb8284d46462bba08949f789018a5f4caa0cf5912394d14e3ba8945cc9df72a75af782fcd6b2d9b88efdeacfca59ca69e75f5bf1f4671856681dda66e12b26abc350d7ba1ff7c1642de5ca87a6dff336582a7ec8ad6e22f45ba331bbc89c7abda07be12ea40ce51fbadce870374f61dcae25d45b9e0ae90cb50f4308a0a18db9a1b702ad8212957127127a22643e0ae1b5c32715560ae832bbcb70acf1be6dbdc2afa5671f59f1ede56ac66892517532bfee1be5c946d2d782fa21e4f2ffd84be52bbfccbf585f76c9fab5d80fb200895bd78b6b09787c0379045c1ebd03bcd2eed1adc31cf9983e2a2a9944c7494eb5ff1d8fa08bb4c37db788a391289f7920940515e74e917eb29e0756287e31b10f3708ab52aac980178d06cef6502000db677463427c099cd8b68a60ae805c77f23aebd007344221d49353c8fb04d34d3835a76fc616bdc73c19659f47b116df7f6337f0a55b29fd95297db52f7d68a07f818273b531f96f55340a08090301487a92f0a29fed74961c0f6d7bd8d979f101889b63709324147f1089637e9dcbbfdcbfca000932a3ea4fa78cf9ff59228623b3bb21a89dcd856ffe73c3b8cb2fe77fe4e2eb7ecd6e71c317f1b343407f2703e0b5ebef06c36e6777681d7a5b721bb9d8eb578aa54b1e502d720178caa8c0cd5be53b12a86ff78eb869fb21d7dc367dd17edc1263c055236e3def9cb0f43494301b49cc82d88c43b98aec4d16ab7c394b9559137255df2ebb0efef1f5cb0504d9c21ee136ca679508f6d346bd5ebf91c09a1d98c79408135742d6bec64aee620c5d940fdda2c8d5d427a4fb8b72263abfe222848b34918e1a436bd6121a21ba01e70b540716ca86de2007b7badcb54a8b771496490348aafec966d1e876a8a37215ed7951c62c241afa3d4532a3e2d961e48c57d7ac7a7d9ceaf044a9c477832d97841f00f308173471139fde4c59de4e3284ce17bfc1e1132f2f8c5545ed88fac5108f8ab38e2b9f0062ea92a25cd529b5108afaefd02477bb71be1ce92bbd71da99d99d3abc4663a89565b6d489759182fb921d91a1b2592916ece0449af92d77e5fc6b54ae3a8e34a582ee2527f3824c00121355b00e3eda6fde4deef661640b62196bd1cba82970e70ea4f55460dc642e275ab3cee09a6414914a7930ad626e5d399160d3323ef0879e0714ffed809cfe20c3a1207f5d77b9cc9b0493ba3fd5c971150ae73096716be907c32a58c2ad3ab61d882e578dac1757d7bab81cbfeeb990a0e6dbff355f77e62e6068e38e421d21bb739bbf78e3f6421980db1881d1aaa3159fe994e33b31a15a8943dbbb1d3ce049fe893294eaa190087eccdb61c1e7b6c88715f6eb1b38328d9ebf80799d65fe0320d09d991ad93b6384a4e4718d25a4ae0e6ee0adda390f8adcc5eb8771e4cb7d878964d25da7ee883cf83d31b32b985fa2019f261de2e11cc8c37fdb18f5b36adc18c62c4178e501152907a96e3b07d682bc28775b55ca5068a8ce4dbb9507648a22f81a2be8b1b664c3b0461777d7965141874a9586eb6d81f7022b3f81c1fae684416f2e8d37933ba93009c96980f84fe5d90a49c5cf78173ddf5099e83cc6f538a23f946361b40cc8031be18e7180851d364e61f3d4b5964b78b6dc878125a8f932420c1d3e311cc375412351fbc484486fe71cdf81b53fba9bfba35635d8a62d03d84e1143bb7c4445c3c77244f7138467539ba15b6dbdc95752755730b9113213bf52ed21a8364132956616b6c53045eb98d6600bde465e05c9fee4fd50298b0bca9d1fe3d3015ff3820c90e5bf859fbed5e6fd853be11b466fb5824257218414ce55a937260950be44eba78066f908b7c68e2c0b885dea52bdbaf835f6a7a634e3e91971b37c2519a9e695324121d186a1b0909f8640da543241a9946838039bb060826630087a2479113bec16a921137615b07b5dba2f2b7c09dc7dd5a95e23b4792712be6e79a2eab2b2540e919d621326a20756096da4684909e8254f65b89b62f23e4ee544aee7141618e2f8db3823c9aa2553310a43113f43159ce504a5e6a0e97a8648fafa71c5156c3fc0d7c37544371807e6d406f2fd7d90cc256b12146af2781525d989460c06f8169510677336391b811119d074b288d12a60f0bdce8e197a8bba5edfd773a1fa9d3abe6f46fc3f7a6d17dc1b11beecd9e348b734a87677050407bd7c07566c4aca6c177030078837d6e689ca5baaeaaba03696a1d2a0ca8f8f2c425bdfe25ea7446587540f1df8a34d7968ad8a8eb212bacb85a4e3489e19dc7f7d0c075ed9093769d72ab892419e2ff487553d6fc4a6c92e6f4e54eefab29086c2d899b810b3ff92d1d67f0944787b663dc65e7fb917de308ab88dfcd8586c19b9b3bce021a03966d6af4d224e60bf46e86fed68d610ff663a4b66b0013d60fc61130d7bc03c6581be0eefac706292c3274a935901db6178631658d8a5eb25cfe9f0e8806ffe15ea5cb973073fa80f619e9065cd8d2ba110c8527491746a3745865bf3c6ae4c5672cfd8daad0fcfb9455659832da979a1ca3d96bd5740faf6b15ca0e28302e3ec68b00acf4ad1e4c3ce5f10f25f87255bfc80d7c21e28306e17191f307161afdce6212e7833aba8d6ee320c59c4e0afd1d07052f22e00cba5ad6deab91b74729859895b8ae0cedafaf7c5edc189a1302abc7ea67f62ca68a77fb2cc41e5ef2b9fd1e636dd80fa82107bd87f9292ee075aa6c7b4bf997af8f4a180e7adf3b2fa38afb72b681e9b5f98466decf5667589d83d028610cf887f68396a61812955ecb92179b060162c5ef78f27de1ceaf896e5c4a5738717bf2ed00b6612fc45ae0f6cfedb763dfadffbf592745239f269944d7ba2f71b66468e8d530f86a47be670247d48eb1b1eb6c89b4189989b36dc4a315a18b679c4289617b440c71e9899e939788eb3dbf47047e1cab74e9e6014ce09587bc475c2c3e7099d57a51cf8589ebb6c64f30efb39aa4288e88dd2b8438b10cca3f0bc92ad376335ce0980fbbe7de98f3fb74e31a86de382c87ea9a6f458bb508d32d101e6d2e1b873cd432dd46b9c422cafad089aa04f31490e762b9090623573b9d6a7108aaf53d7b861f139326de1fad6d1b73dc8715d4e0a765f056dc6be539a73073778de1652754ace6facf3b067bb18516eb873f08ea7d146cf1e1b296fce9f5bc9bce4b968c1962c9df728b69a247dcc8f3a940ed2c491b65c8c40f6b6697215534b15ae4630325a92a2fb232bef196ac705d475c3fdee7a8ce6d65ec8ae9c1d5b17c4fd5596135b7341ccf0680862e926bb593ffed3212073fb619d8ee78b80e09517cbbba0cf0d5f29b96511efccb56ad248a82ebd72aa24f9ae83bed884836671efc8e3db5480059afee0a57d9ecc61677db98f5137297460482726fd0f8e2c9e1e3f22ab02ab89e1c16b5b5d7da3e5aaa141c8652dcb5330681d19eecdd63909b868507a80d8db6d768464ebec8250e778e15f307d41a00a03de34ec04d283e275df470825ebd29ec75019de7b41e13270a30314ffecff99697257e61ee3ba153726bdd08cc0716ef002604c4f99ded938bd38fa538534f79df06b5abdf8c484db14f67fb744b1953cf7221f880e74ec92839a3b96a7e46bdffeaa3bbfa2e9303f3fd7442644674607500f29c5c87b52a6ecdb71810cf158057164f01f2217f7c7c051fb19cf2fe0f93d13cbe16b7bd6288b1df49238a2aca55b5c2c551243f825582ed238591a4876f76fdaf63b4b01b378617e1230ca37f417961e41c762781bbd80aeead112aed8d6da01f17fd60d69d68ec00c177a92393c30d120408bef48f8e6e55e85690e9ccc1028ea07807b91a0f62232c463ec391974217d99b9b31c46ebdf2b3cbe8a9a4295821ead4066653e5ef0ae1a438dee5582ebdf6114c3ebe4714742d3589cdb952105efb9840946813434fb1d51d3a463bb36f360238d2d0f769aec8db7a1d998c63c11fac036e12a1f6cdfbdb1775490919526c0875302e5f8e50a0554d81c46b9c28d2d5a5c20cee6a88af5638270771faf848f85600c0ead729e1e031a0fa095e1bcae5cac05", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:47:01 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf80, &(0x7f0000000640)="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", 0x22, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e1296"}) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x9, @dev, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 20:47:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1449.295033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:01 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000940), &(0x7f0000000980)=0x4) [ 1449.350656] netlink: 'syz-executor.4': attribute type 105 has an invalid length. [ 1449.356042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.384090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.410917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.451404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.473632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:01 executing program 6: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) sendfile(r0, r1, 0x0, 0x20d315) 20:47:01 executing program 5: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) [ 1449.860261] netlink: 'syz-executor.4': attribute type 105 has an invalid length. [ 1449.870941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.874942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.943916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1449.947263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x117, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:02 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) [ 1450.421764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.441737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:02 executing program 5: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) [ 1450.476080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.513835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:02 executing program 6: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) sendfile(r0, r1, 0x0, 0x20d315) [ 1450.531605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.571329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.865703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.884604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.912409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.936714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:03 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 20:47:03 executing program 5: r0 = syz_io_uring_setup(0x203, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) dup3(r4, r3, 0x0) io_uring_enter(r0, 0x2271, 0x0, 0x0, 0x0, 0x0) 20:47:03 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) 20:47:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={0x0}}, 0x0) 20:47:03 executing program 6: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) sendfile(r0, r1, 0x0, 0x20d315) 20:47:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x129, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1451.091004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.125723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:03 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0301, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r0, 0x6801, 0x0) [ 1451.155712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:03 executing program 6: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40011, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x7) sendfile(r0, r1, 0x0, 0x20d315) 20:47:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x2, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}}, 0x0) 20:47:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) [ 1451.207664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.212004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:03 executing program 1: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d1, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) [ 1451.276186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:03 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) 20:47:03 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r0) [ 1451.527245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.579214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.581215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.632156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./mnt\x00', 0x0, 0x0, 0x0, 0x3a0c0a0, &(0x7f0000000180)={[{}]}) 20:47:04 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 20:47:04 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) close(r0) 20:47:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x2e0e01, 0x0) poll(&(0x7f0000000540)=[{r1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pwrite64(r0, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) 20:47:04 executing program 6: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$SEG6(&(0x7f0000009500), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000009600), 0x40500, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000009680), 0xffffffffffffffff) 20:47:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x3}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1451.838982] audit: type=1326 audit(1648846024.082:369): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=245984 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb50f9f3b19 code=0x0 [ 1451.842300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.853947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.895827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1) [ 1451.912915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.949773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) [ 1451.965616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:04 executing program 5: syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x2}]}}, {0x0, 0x0, 0x0, @empty=0x80040200}}}}}, 0x0) 20:47:04 executing program 6: syz_io_uring_setup(0x5446, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000cf1000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) mincore(&(0x7f0000e5d000/0x2000)=nil, 0x2000, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) 20:47:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 20:47:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 20:47:04 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='debugfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xc020, &(0x7f00000003c0)={[{@fat=@uid}]}) 20:47:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f00000006c0)={0x1f, 0x9, @fixed}, 0xe) 20:47:04 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000a, 0x0, 0x0) [ 1452.259102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.270324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.308502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.321998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.671394] audit: type=1326 audit(1648846024.913:370): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=245984 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb50f9f3b19 code=0x0 20:47:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x0) 20:47:06 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) syz_mount_image$tmpfs(&(0x7f0000003400), 0x0, 0x0, 0x0, &(0x7f0000003680), 0x0, &(0x7f00000036c0)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) 20:47:06 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000a, 0x0, 0x0) 20:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x10}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x18}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:06 executing program 5: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "cb47f4", 0x10, 0x21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "81cd0b", 0x0, "fe8099"}}}}}}}, 0x0) 20:47:06 executing program 0: mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 20:47:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x2e0e01, 0x0) poll(&(0x7f0000000540)=[{r1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pwrite64(r0, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) [ 1454.119091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.147325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendfile(r1, r0, 0x0, 0x8000) dup2(r0, r1) 20:47:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="d4353902a8fc482a86ebe2be6558", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 20:47:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x0) [ 1454.186380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.205561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.239570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:06 executing program 2: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x60000017}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40801, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0)=@other={'unlock', ' ', 'io+mem'}, 0xe) io_setup(0x5, &(0x7f0000000700)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f0000000080)=@unlock_all, 0xb) [ 1454.260639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="308d301fa4cf"]}]}, 0x20}}, 0x0) 20:47:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 20:47:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) [ 1454.550593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.567729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.595239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.618544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x2e}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) [ 1454.762288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.819654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.826159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.873753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.878622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1454.931033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.180615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.230998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.235872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.286510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:08 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000400)={0x1, 0x0, 0x1000, 0xf04, &(0x7f0000000640)="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", 0x21, 0x0, &(0x7f00000003c0)="09a09c06b2c03fa4114a4b5ea688ea609c38fc05f84ab2ff8fc50cb504b3499e12"}) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) fcntl$lock(r2, 0x6, &(0x7f0000000480)={0x0, 0x2}) 20:47:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="308d301fa4cf"]}]}, 0x20}}, 0x0) 20:47:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x25}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x2e0e01, 0x0) poll(&(0x7f0000000540)=[{r1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pwrite64(r0, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) 20:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x30}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:08 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000a, 0x0, 0x0) 20:47:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) 20:47:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) [ 1456.408506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.411406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) [ 1456.458646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1456.471775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.476372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.540532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.542617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="308d301fa4cf"]}]}, 0x20}}, 0x0) 20:47:08 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) 20:47:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000780)) [ 1456.852083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.859793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.904486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1456.909064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x69}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x65}, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1457.076240] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:47:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) [ 1457.193420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic="308d301fa4cf"]}]}, 0x20}}, 0x0) [ 1457.221897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.248388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.278293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.312035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.337916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.627080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.644195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.677882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1457.694432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) 20:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x3}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000500), 0x2e0e01, 0x0) poll(&(0x7f0000000540)=[{r1}], 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pwrite64(r0, &(0x7f0000000000)="a7", 0xfffffd6b, 0x0) 20:47:11 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/cgroup.procs\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x4000}]) dup3(r0, r1, 0x0) 20:47:11 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r0, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 20:47:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) 20:47:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x3}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:11 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, r1) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x400000a, 0x0, 0x0) [ 1459.385251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.397693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.456572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.466782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.507131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1459.511076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.524519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.549474] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:47:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="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", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) 20:47:11 executing program 2: io_setup(0x8, &(0x7f0000000080)=0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, 0x0}]) 20:47:11 executing program 7: r0 = syz_open_dev$evdev(&(0x7f00000040c0), 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000004100)=""/71) 20:47:11 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000200)="a12324a32401df3c8009a24fa614c44da3faa9ede4e03159fe989cce3710ba27e6e7b2e2d80878c284cf81bdfaf62bb2a012a161f3e5bff9b2c524a1b4f97b656ae521add924ca5722a9d73629b64854d28a221aed3028764d01e8f24f8e188e8facd5e8d67e5544455d6699c7c4ca509433d7cdbdbd4778329d2935f914fa32e1cccff520f3bab2d5cf46463b55fc11ad9587dc9fa60b4a5dd214291e20fe07aef512c168d6634dd3bb7b762a64022b6472be0c03140deb766b1b71f4acd311ee6f3daa0df5b3df244514c305be6fdf43b11c226d7557a9f4ce2967bfa7e458cdf9fdb19194f3497d5fddc4065178a31157a6b114606c0f8b4cd815a670733543e57e1227ba4f0ea499b25927ff4a9458e8c6f7a9ecba664f8bac7e6af8a6accd2a3c204df89b1e70bc0fb076062eeb1c4fa6b03e7a845f60903794c41d27a2663cefde8f4205dde959e52ea86ce456d93005271d5c2b819cc4d784ff0f01538c8e999bfd5512dfeb4d09a14cf63e673c0b83420c5b345de6c87aaa2a8f9dc433611deede76445ce43ca3bdc442d416db846aaa26795a47f18c848964a8c7c9610ba1d057dd036c5045752fb894f7dfdba76489d839b41e2b6b526a0d425c7c895529804e87eb39f19c23b88ebefe144b6122bca653d53317e2459a2c05ebe7279e4085b40ac771ddecb7ac473bacc19522cf8bacc978f9c41297bce01d36751f7d61ebe64e9282e3eb4d067893d444e838010f639b56fe28e765d951539399d2d943b6ab629292e46cf43ceaf223ddfc8feb04b9456d436cef9826019802337069d82a3ad007d57f78ddf18129ae99f2c2c4636f7679171655f041c294bb8679fdd42a29fc98ac8b3f137e99c45ca54e357b7d7b2faf1078871b41b2071e254eefed5b4b841db92d678675a055423dd7d4c211d49e6ff72209de58b63fa73efcfd3244cff0d17df1c8c3ad40adfc9a5383268f017f54516d3837c4bdd022878bb08f3a082d7efa7c91051a2fd793f1af6123e63e95001ed71ad11dcc88f0e0e11b5743af6105ab025e2981f02817997caf7bdf2bc0552444f116d6cd46425ab7a8e4386110164bb54088c121e3499be8dd8a64fff33909edfe5d42b24ca4c2b325e20f04167a7a433daa6a97c133d64aeffbb12b030c87600ed3b4e4cf4bf1d7f9417d99ad8eeaa34ab49e78793b148a171aec8ba7e09322588e8461f55ef17f70d5ec1ebf851eb0c9ae18410d28136e3ff57d16e363e83838bd7e7740712ad08b56c976174d20cd88379247e1f33a74f5a02cd6cfe37e4964fc4b92c7f8a97ac7b35153d97b5951073887c49b95816f012550a1fb726d41c94dc3bc42018829ec1e24e4135f3f9e77da84bbfc385f920ef29c963c8a65c3f73c2faacd9cc653cd4f015d83f1e55b7bd8955fa19fcb654bc67ebd0aa9f73886e88e29b8f278a41e80d2bd2f2ca56ab920ce6ac5251e021b32bc72152f42b608ab96047e60d2f1115ed8eceb2d2aa510b7eb00b161f024d6e28962da49915d89d7d67082a85a758b74b0bcf274e97417bb1bef9091e114a684ee4711a753fd3a0794bbaeef5a91ec03013a1d29c37e705e07173639462a8080398775bdae0515a2006cd4a6fbedb2f5a1dfa97547552d74a8709a1d6dbabc90100fe35aba0f65af392a4a1464a34c1fdafddda562f627567e744061ea6c3e2a22c8cdf092ae4148fb1b80210f7f432c4e4c3aa8fdad5547e68719e850bea56a9a539324d8c7bab88d8cd921874f80693e20b3f6b8cd496ddd85ec0a739b15de239fcd7a13ee39d38ed506e09bc99890956e8e889abffb34283b255245fccbad815211809adea27dde9f8d4db0ce92563ae9f00fabd4bb22da6d97700f3314f89d6dec090445762d8374f092420c7c1992ea68854cef860ac8ff871b250af06ba0701117b8db8aee886132eb4889f8dee6ff5d5c5d9385fb29780449d7381b5103f5742617c2dcb21154bcf9ec6c0d90844f01f000ebaf8039c29faaf1eae86421a5ec30d55529e15978bc8cf467fc3929be9ecefe04c30327b3655e9f7bbe39ab81dd70c7bb84abb873d232e05b412b48e24eeba15b5d5a8a0844948f4e75c14232af22e0366ad3be26f943b8db156fe1b2a1b3f160fe4cff6f7f13967cefad3f0d03313f1dc994ffa57d95853a4e6732fc1b26cb1b26c1982a6a884f9deee83191e1fcca630dbef16b3cae7c321aef9195b1511f11b82739dad7ecdfbfc12eec777455d2a310ebcca80a5ec3dd831655205fd1647f1d0c8c2413bcf78ed2fad69d935fbdd3d7143380f100c0438ac329d09db68272fb59584e8751ee64bbb550fb2ea013653f1bffa8d8d73be997f43dee239fcb2879c7b2c3b5ad1ec24f96f25e99934d89c385f0bc6bfa1f7c5f9920141ad5a4ed1144d1e9099da09bebea803b65f2cb380b58bfd6a2c0f08c7ebf73c8aba1ef38198cc3eeac195c61db7ab3bd9ffdf0b7fd5ec75eae3f81414416a0eca8f7770daa1344594466fe756b257ec40d5bc2570f38764a83e3b7e39bc9aa1db266286773480840066701c4657130ffedadd40d6421dc184c7a0793c93d356b39dfa91fabf4460a538c6d219cb54225b98a18d9c946b312fc5e3b6028ff4f9f6d2d221c10ee70b9b37ef9d9bca6b5239a73c09e53ace19304af85901e686965252e1fb908005059d337fc8bf10c153a51379424efdaf9e59b381f80baf69f410bda74cf8819899718e80b4fe234622af827e54256fd3ba355f8b99adbe1815ae4e682d4938b8578d8910510e8ff0a312bd3b12fdc99a604d552279879d2eade98c385513335d0c4207af80cdd81b5e8efc363cbea2be07fe8988569f15fcab4ad9fe89f3737206709a02a6aa666bc8d1d7d4da1ef048b00e538cdfaaf95e31c930b5f865a37ebdca8235e751c474b888e7a21ad122bbbda73e6c243efae537fea8e093267ee2920acdcc97c540c6fe48e191513f3691a3f4e0c6882907d68e3d8aaea1626c9b5322693db2a0d680c52d1ad4aecb01093ee4f38b94840efa3d149668ee65febd74c1b544c73784ff94a61ef922c77f96b8c074f69177a82a1c68c70484d4b28b5d1d27bf7e1afa66d1496de7e85ba55c294f5dcc68e653854c1fc5da7034ee3224f5f4d868c95b27e15baa2b95ae9c60b767998d590d311cfa7e8ae45ac8934e82d55c3b6e24ecacd197eac29c46d33dda89c5b6390001b70d888bbecdd939def962c065bd400e3be6447fb29ab2428f48c61291d8903c67ad662c26b5ee5c1ee949e85d4b9e52fd1490e5e436bde1a0d8d9c98afdd35900ff7297eb23b39d51a67f4d0479ebea26bf37cda4507902f4dd8602e1e0d93f5f817db0627c02738c35fa54d81d3a80f42753f9b01fa4f9d133916dd7677f4b885bfb9fa14bd34b951995551fc1eba71ee917f1e73f3083c0423c623e816b1adba33290a0f3d20bd04bf19757106cdbda75a51a44a1194fe3bb1300edb20e0fe46db41b9fa8f732b0e7512efb582351b5bef35bcfcfbaf2f7726ffe4dda4f5fe17a344d95bc15a3920dfad7523c69ce84c20de7cd23487821a8366754471d9ed0cd9f4f37bb1def6cbf691a8aa46c4624568006dfd42dacf40448ee6a136b6813ea24acacfbc37aaa1cc1d663905880ef7a6a914f147f88cc6c3e7c51e4e8bd00e690c94b077a0afdf2d0795a58d5fea79ffba8d499d671a550200793938fd8957199264797d3fb19656788a98c4734f82169528a717c4b239a898724730698c2bd5809e225c313a79bb5d755393be40401439daa727e9ef94c4801894eccc0df0d91f8850dbe1325db0ff8f9f3d222092494d3e1e03a73bfc53cb81f8018335a180053bbb70da493162440b39e988ed5018888ba5ab9f06195eaecb37f671d8eca455c4a35ce7877c937b4b5856f4ef497993d605d3bac6c6272e178d9d493dafd89126ca1e5d3c53edff5d56f3184601a2b772783507a18ac0d25736107e192442c6a8704c25fc1fa092147236e93497f8450425b88343201a64f2f70c1758b5df54eec07a7ce0ba1b879da86c1859e98d1635591dab7e587b896b25a5a8d0c201baa76bdd3b56b082095b4e3a1cbbed9f14bc109ea5333ef88096139c8aee25e5d800868cd9b247d72e6c2c2d603ad53a34c30a00773ec716540d528824cd376a92ec15e0fd03578895c7b6538e38006cb36590e10a2f0abedf1d9d33321b386d4f74ff453b6a9aa2a04d55a011c6aae01b07350a0dee83473fbb822ea10eac0a129d49da64f0a06eafaae9f16860696cc3c8b7ac98ebaa42b664610904af227283a2142690bf85df9d9f1d5b5bf198007cdb385e1c99ee83fbda7d37f15e22435cb201eb6116169cb088da6c2bda0859ffc2a3207c9c231e846fb9673501d8dbd2a1c57ff1a322ce9087b993f56479935c272348fd97642091cb0f815a2532dd8091e738147674e92333b2ea08ee39c36eb8e945ac7c9a3e68aa9205bc5b5e386ae479474846ff5b5fb99b9caa8194cef9ca487f199f762e9d4cbab7fd6fa4e2cee53babb0566ccfabfa9ab2739dcdf2f8dc8a7cfb52065802cf00b4dce65293d02de3cf92a085834877e11082b531cd96f68cc3f874133214e87ebe2c3d9c2b7f3d64674487aae0bc934f406ee223e6e4b9c432caf9b520874396b6ff583989f413a498def69caad156a1842a96f86fb1a2a5bb618d12506095a1a190fc719e3c374c13a84efb328e35c406244276abce015da1f27a74c468e87f4b45187e5e1ea21e8aa7f82f9f69ddc6ad567e7a6bb1d8748046b7cb50e51d2502d1a43c0bba264581845084637de7be27c85cc7ea50f9c7eed99e3747415a4430032d31ff6bdf050f42cb1c2d53dae07c395353a43c8f9cfc8a6961644e56c6b3f55f61e8bdba45c45fd3bbfdcc45b9d310e6fdba172802e62909d1f53bd19f4383369f889963b9c5d3abd40fb450091c70ca85674fe0cc8803d09905195c146bfea89b0acd1d8365763f4c419f4115dff90277d1ee893edba50c9dfeed0f1b730ea54db5d3fa9ac13622814ae73e9725ef00c4edef85f4aec7e9b47bc76e89d49f620447e4b0e8e126fc2fb29eb636b2673bdc8da572425a012b963bee10636615d14c894818dcc29292e9236f52dae7acae844227d54fb775523ae603cbe7ca5c78f0fe0ec5fe053fcb9769f0037980f369a5b9e6f285621a72d4803efb1eb086ea9f249c52e42804f03be7cf1bc76f0a0c8730c20eff81ac66e9a09c0c42157d122e2645020e8da0ac37f1ec07e9bb176ef3be10e002425bc3f34cc8dbc613f843c47e4cff60165c9df3f529edbba831bcf90e4083a966416eea3cba4656c577ce02ef4bc82815cf022cf8bfb5f8beed937795d4159c9c05ec6ee98d59f8124e9ee446b62a35ef3112dc49f987c28f11db9846915d7795143c7a831ae8f2730b4194951bd254874f4d6cfdf3a97f0c89d12f9b3d7174e055392f449a1c7463ef03665bcb09d986e1ab0b52ce3d51d14838b831420d4ba6bb48b270670508da40e6387955cb6e2dad12fc0c3ca54f116054e8a2a1b4816093511cf8ff91a4097c6507e1f133052db016a562b5020243f2fd966e26faf3d7a279b5a4d04f670c88896aa5d3e099a779dc05537e62b99894f87ee0feba8255456cfd1d0f120aba605379ade555618792e026713387038f6fc02d157713ee3ab594e434506d1ebfd562bb64ed4592eb315d9b3d179bc38f19cb733f7fe7c5b27e30677b4e8568ee1e4f7c344f19dafc6fc0e93a2f472c09f94b59fc6eb8105ef90308171a98cb", 0x1000, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000040)={0xc}) unshare(0x28020600) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {{0x7e}, {@void, @void, @void}}}, 0x14}}, 0x0) capset(&(0x7f0000001c40)={0x19980330}, &(0x7f0000001c80)) setpriority(0x0, 0x0, 0x0) [ 1459.820921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.842771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.871637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.888814] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1459.894144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.923747] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 20:47:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000001880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0xc3a45a9b1f066fb4) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 20:47:13 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000002e40), 0x0, 0x8802) r2 = fcntl$dupfd(r1, 0x0, r0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000300)="0040abe02400030021206cda3b5e5672b89aeddb2a535fbd", 0x7ffff000}], 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 20:47:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x4}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) setsockopt$inet_mreqn(r1, 0x0, 0x17, 0x0, 0x0) 20:47:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x6}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) fchown(r0, 0x0, 0x0) 20:47:13 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f7366805d8600080801000240004000f801", 0x17}, {&(0x7f0000010100)="f8ffff00f0ff", 0x6, 0x800}, {&(0x7f0000010300)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010004eea70325132510000ea70325103", 0x5b, 0x1800}, {&(0x7f0000010500)="2e2020202020202020202010004eea70325132510000ea7032510300000000002e2e20202020202020202010", 0x2c, 0x6000}], 0x0, &(0x7f0000000140)={[{@rodir}]}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 20:47:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x1a, 0x22d, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x8100}, 0x0) [ 1461.460782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.499741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.519539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.577800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.584701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) setsockopt$inet_mreqn(r1, 0x0, 0x17, 0x0, 0x0) 20:47:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 20:47:13 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002800), 0x8000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fork() sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000003240)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003000)={0x1f0, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x40}, @ETHTOOL_A_LINKMODES_OURS={0xfc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7678000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-]}]:-'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '^^^%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x80}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x81}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x96}, @ETHTOOL_A_LINKMODES_OURS={0x58, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x69affa1e}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "16480aa788f4d1692e49cc2d096541c375e56a0b8b07740f2c6af4fd1efd1e646c1d6850bc94f746b8f273d31412ea7245ad6edb9b1bb3606df316ce1812cbd10684d4f9a37d"}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x41}, 0x0) [ 1461.645639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000a2f6000000210000000c0005000200aaaaaaaaaaaa050020000000000009001f0070687930000000000a0001007770616e310000000a0001007770616e3300001a05002000010000000a000100777061d50b"], 0x60}}, 0x0) 20:47:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000240)='./file0\x00') umount2(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 20:47:14 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}]}, 0x3c}}, 0x0) 20:47:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) setsockopt$inet_mreqn(r1, 0x0, 0x17, 0x0, 0x0) [ 1461.908982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.952494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1461.959773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.010712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x17, &(0x7f0000000080)={@remote, @empty}, 0x4d) setsockopt$inet_mreqn(r1, 0x0, 0x17, 0x0, 0x0) 20:47:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, 0x0, &(0x7f0000000040)) 20:47:14 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file1'}}]}) 20:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x5}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x9}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:14 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 20:47:14 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/55) 20:47:14 executing program 2: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1462.211343] cgroup: release_agent respecified 20:47:14 executing program 0: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:14 executing program 1: ustat(0x0, 0x0) [ 1462.402807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.478240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.484364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/55) [ 1462.532431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.562395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 1: ustat(0x0, 0x0) [ 1462.641981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000300)) 20:47:14 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/55) 20:47:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40010, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a000f", 0xf, 0x800}, {&(0x7f0000010500)="ffff3f00000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011600)="ed41000000080000dff4655fe0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000012c00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r2, 0x0, 0x200f5ef, 0x8000000000000) [ 1462.874465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:15 executing program 0: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) [ 1462.925188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:15 executing program 1: ustat(0x0, 0x0) [ 1462.980103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1463.030642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:19 executing program 0: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:19 executing program 6: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000000380)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/55) 20:47:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:19 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000300)) 20:47:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x38}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:19 executing program 2: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:19 executing program 1: ustat(0x0, 0x0) 20:47:19 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x23035, 0x0) clone3(&(0x7f0000000ac0)={0x134064500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1467.171971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.221618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.231971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:19 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000300)) 20:47:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) io_setup(0xc0, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1467.288761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:19 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x18, 0x1, 0x0, 0x0, {0xa}, [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@empty}]}]}, 0x30}}, 0x0) [ 1467.296709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.352744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:19 executing program 5: r0 = memfd_create(&(0x7f0000000040)='uJ\x92#\xb5\x15\x14\x13\x9d/\x14\x17p\xa6\xed\x8f', 0x4) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) fchown(r0, 0x0, 0x0) [ 1467.635438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.689691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1467.698844] netlink: 'syz-executor.6': attribute type 15 has an invalid length. [ 1467.710506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, &(0x7f0000000300)) [ 1467.762286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:20 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4507f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="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", 0x587}], 0x1) 20:47:20 executing program 0: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x63}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x7}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:20 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96153f", 0x3, 0x3c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_reply}}}}}, 0x0) 20:47:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) 20:47:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee00, 0x0, 0x1000) [ 1468.069385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.118487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.149406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:20 executing program 6: setresuid(0xee00, 0xee00, 0xee01) setresgid(0xffffffffffffffff, 0x0, 0x0) [ 1468.173724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.208020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.227737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.526391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.546351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.577045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.596558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:22 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) syz_mount_image$msdos(0x0, &(0x7f0000006fc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0xee01) 20:47:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x65}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:22 executing program 2: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2e}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, 0x0, &(0x7f00000001c0)) 20:47:22 executing program 7: rt_sigpending(&(0x7f0000000000), 0x8) 20:47:22 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001200)={0x88118d00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 20:47:22 executing program 0: openat$full(0xffffffffffffff9c, 0x0, 0x14000, 0x0) modify_ldt$read(0x0, &(0x7f0000000380)=""/156, 0x9c) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "40107b0646d859d0a5209e3d87adb6efef98cd13c44505acfc4068cb9fe36b013a88ab9b19228676fc6b8f3d62f11028ab9bc047246775487fdaebac869a2df1", 0x10}, 0x48, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000540)=""/117, 0x75) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0xd, 0xa, 0x1, &(0x7f00000009c0)) socketpair(0x11, 0x3, 0x7, &(0x7f0000000a00)) [ 1469.859649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1469.910629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000a000400000000003300000008000300", @ANYRES32, @ANYBLOB="0c0017000202aaaaaaaaaaaa080001"], 0x3c}}, 0x0) [ 1469.933356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1469.990607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.000185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.059626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) fcntl$getown(r0, 0x9) 20:47:22 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000005880)={0x0, 0x0, 0x0}, 0x0) 20:47:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$update(0x2, r2, 0x0, 0x0) 20:47:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000a000400000000003300000008000300", @ANYRES32, @ANYBLOB="0c0017000202aaaaaaaaaaaa080001"], 0x3c}}, 0x0) 20:47:22 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000a000400000000003300000008000300", @ANYRES32, @ANYBLOB="0c0017000202aaaaaaaaaaaa080001"], 0x3c}}, 0x0) [ 1470.475902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:22 executing program 6: chdir(0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/132, 0x18) [ 1470.536904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.571725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.587707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x69}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x3}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1470.884807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.925371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.956337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.980185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.014210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.034944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.323610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.342739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.374785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1471.394757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 20:47:26 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:47:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x2e}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:26 executing program 2: r0 = inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40086607, &(0x7f0000000200)) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) inotify_init1(0x0) inotify_rm_watch(r2, 0x0) inotify_rm_watch(r1, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0x12000440) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="708df8755b4d753a32206f76492591c789ee2820ad50544e8dbc5d132020e08b286e73aeb26b62c7d6272db87d87561e86a55ea09a94cb0c436a68b7c436e83e14ab9c2a3f72e92419bcc8ef41177c", 0x4f, 0xfffffffffffffffb}], 0xa00, &(0x7f0000000180)={[{'&\'@\\},#'}, {'%,..\x00'}, {}, {'\''}, {'(\'^'}, {'{'}, {}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{&(!,[-^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40086607, &(0x7f0000000080)) fcntl$addseals(r4, 0x409, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x6) inotify_rm_watch(r1, 0x0) 20:47:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x4}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) 20:47:26 executing program 1: clone3(&(0x7f0000000800)={0x20028000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:26 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000000a000400000000003300000008000300", @ANYRES32, @ANYBLOB="0c0017000202aaaaaaaaaaaa080001"], 0x3c}}, 0x0) [ 1473.856475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.884809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.917655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:26 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) [ 1473.943939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:26 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0xffffffffffffff34, &(0x7f0000000640)=[{&(0x7f0000000440)="02", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) [ 1473.976023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.997203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.286149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.335998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.349379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1474.388112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:29 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:47:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2046034, &(0x7f0000000180)) 20:47:29 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="061df6621b58", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bfdd95", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, {[], "896ff1654f5d30aa"}}}}}, 0x0) 20:47:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) 20:47:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x69}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x5}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) 20:47:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1477.286704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.288108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.335788] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:47:29 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:47:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1477.355683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.366777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:29 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000000)={0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}}, 0x0) [ 1477.418009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.425107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) 20:47:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0xffffffffffffffff, 0xffffffffffffffff) 20:47:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 20:47:29 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001980)={{0x2, 0x0, @dev}, {0x0, @remote}, 0x4c, {0x2, 0x0, @dev}}) 20:47:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x31ecad270770207b, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 20:47:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2046034, &(0x7f0000000180)) 20:47:29 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) [ 1477.748961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.765582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:30 executing program 1: munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) signalfd4(0xffffffffffffffff, &(0x7f0000001080), 0x8, 0x0) [ 1477.800223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read(r0, &(0x7f0000032240)=""/102400, 0x19000) [ 1477.815311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.853281] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:47:31 executing program 6: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2046034, &(0x7f0000000180)) 20:47:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x6}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:31 executing program 1: r0 = epoll_create(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 20:47:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 20:47:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x31ecad270770207b, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 20:47:31 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) [ 1478.933741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.954394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.960281] EXT4-fs (sda): re-mounted. Opts: ,errors=continue 20:47:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) [ 1479.010882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.022083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x31ecad270770207b, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) 20:47:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2046034, &(0x7f0000000180)) 20:47:31 executing program 1: r0 = epoll_create(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 1479.067496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.081280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:31 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 20:47:31 executing program 6: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1479.327318] EXT4-fs (sda): re-mounted. Opts: ,errors=continue [ 1479.383211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.398302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x31ecad270770207b, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) [ 1479.433638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.449226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000080)='./file0\x00', 0x4) 20:47:31 executing program 1: r0 = epoll_create(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 20:47:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 20:47:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x2}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 20:47:31 executing program 7: syz_mount_image$msdos(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) lstat(0x0, 0x0) 20:47:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x7}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:31 executing program 6: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:31 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f0000000040)) symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/87, 0x57) 20:47:31 executing program 1: r0 = epoll_create(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) [ 1479.789695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.828162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.846381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.895714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.905373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.953383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 6: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:47:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) [ 1480.241388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.262287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.292721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.315580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) 20:47:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x3}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) 20:47:32 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/189, 0xbd}], 0x1, 0x0, 0x0) 20:47:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x53}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 20:47:32 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 20:47:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) [ 1480.488974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 6: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20:47:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) 20:47:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) [ 1480.572687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.598366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0xc) [ 1480.631037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000d40)=""/244, 0x7ffff000}], 0x1, 0x0, 0x0) [ 1480.665745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) 20:47:32 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) [ 1480.725391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) 20:47:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$FIONREAD(r0, 0x4b66, &(0x7f0000000040)) [ 1480.942688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.992407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.035206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.086435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) 20:47:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 20:47:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) dup2(r1, r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00210c000000000000000004000202080017000000"], 0x1c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xfffffe01}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001740)={'syztnl0\x00', &(0x7f00000016c0)={'sit0\x00', 0x0, 0x29, 0x1, 0x1f, 0x8, 0x12, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x20, 0x1ff, 0x3f}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x1ff}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000100)="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", 0xfb}, {&(0x7f0000000200)="f263f79a36e6c8ad44d4e1a7afe655f434dd844633aaabab4c2ff393496f007f8eca3032337ce829e8214139446136777e26cee9d7abacc319f7d99f9f57ab7a839a90d4ff74b891e84241bc3e364b231acbabeff9446f70a321a10c803c0c7ba15087e5aa4e288ca517e15bf7b78734086cef03b6bbb6fefd3c41983f41c7a71bb624856bfa7981c6165a1de03dc469472df8a085cf5b73cd459599cabfe5be2a3ecc5e07090dd1f30738538389a2d88f474b82ce25724d1b67d0ce93f535b2b9b899bb7dbe51a4f95021fb4ee2ba1c042485e124184d28919244c9bac55b9320ec69c74e65b4c14094", 0xea}, {&(0x7f0000000300)="cf9adc8cf235d880e9d2255e60fb3aec4dbf3cdba66010826e4071babad2ca66556bbdffb202ea548178217aa240b34038ad92e1345881e1186cb7df87e959f26f090b4065ab95dfd167a78d86af072e505dbf26ddadb615d8ea3c9de8045d44b35ce9d92260146276093c1a21d02755a7b4c31f1b62fbd1ced2aa5fdae61eec3dba49c731ea14127604a02fe9694e7cdf3edf95aff64e7d3a140f8f3817da117d36caf6853373b7bba5f375e3ed44d8a660783698330e887e4dde2bd22b332a1ce07f56fbc793db107b91092ded51535ccea76658ec3fcc23a9", 0xda}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000400)="c056ca", 0x3}, {&(0x7f00000014c0)="8ef8c167e9fe4fae1d84203106640ed992f1b6029def3af1e88ea0a6fb9e22166854c1fccb8ff6a1bae5d839c6c5d22325ed340f044e3eecbab610e32f0db65adf74e148b674af2bb370a042898bd1b7dc27e03c47aef7492f72518326dc607b83893164777e2425a061a7f5503147ca113d97128fea6f", 0x77}], 0x6, &(0x7f0000001780)=[@dstopts={{0x48, 0x29, 0x37, {0x11, 0x5, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xffff}, @ra={0x5, 0x2, 0x2f1}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x7f, [0xa2c, 0x80000000, 0x7fffffff]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}], 0x70}}], 0x1, 0x5) 20:47:33 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) 20:47:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002600)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000025c0)={&(0x7f0000001240)={0x14}, 0x14}}, 0x0) 20:47:33 executing program 5: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20:47:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x4}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x65}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:33 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0bc5351, &(0x7f00000002c0)={{}, 'port0\x00'}) 20:47:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FIONREAD(r0, 0x7040, 0x0) 20:47:33 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) [ 1481.323758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.327990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:33 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) 20:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file1\x00') [ 1481.382961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1481.437384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.510593] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) 20:47:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:47:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x44, r2, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 20:47:33 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) [ 1481.757291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:33 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) [ 1481.783175] wlan1: authenticate with 08:02:11:00:00:00 [ 1481.784825] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1481.808180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.808395] wlan1: authenticated [ 1481.811216] mac80211_hwsim hwsim155 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1481.844150] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1481.950939] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1482.055073] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1482.158968] wlan1: association with 08:02:11:00:00:00 timed out [ 1486.398922] Bluetooth: hci7: command 0x0409 tx timeout [ 1488.446937] Bluetooth: hci7: command 0x041b tx timeout [ 1490.494899] Bluetooth: hci7: command 0x040f tx timeout [ 1491.691470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.692802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.695560] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1491.735159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.737802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.741552] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1491.927582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1491.983071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.038171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.348014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.398809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:44 executing program 0: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) 20:47:44 executing program 7: syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) io_setup(0x8001, &(0x7f0000000c00)) 20:47:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:47:44 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, @short}, 0x14, &(0x7f0000000380)={0x0}}, 0x0) 20:47:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x258) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 20:47:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x65}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x5}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000040000000030000b588e0d3000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f0000000000000000010c0000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000040)="000000800000e2675b", 0x9, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) [ 1492.542928] Bluetooth: hci7: command 0x0419 tx timeout [ 1492.551615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:44 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xfff]}, &(0x7f0000000140), &(0x7f00000001c0)={0x77359400}, 0x8) [ 1492.612700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:44 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 20:47:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1492.662502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1492.669310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:44 executing program 0: semtimedop(0x0, &(0x7f0000000740)=[{0x3, 0x2}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000780)={0x77359400}) [ 1492.727972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x0) 20:47:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x258) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 1492.785038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 2: r0 = syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(r1, &(0x7f0000000240)=""/45, 0x2d, 0x0) [ 1492.980760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.030658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.106506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.149706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 2: syz_open_dev$usbmon(&(0x7f0000000840), 0x0, 0x0) 20:47:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x258) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 20:47:45 executing program 7: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) 20:47:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:45 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 20:47:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x8001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:47:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:45 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1493.347827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/96, 0x60}], 0x1, 0x0, 0x0, 0x48) 20:47:45 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c8", 0x1}], 0x1, 0x0, 0x0) [ 1493.410277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.436732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1493.466440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) [ 1493.503537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) [ 1493.560664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:45 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c8", 0x1}], 0x1, 0x0, 0x0) 20:47:45 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) write$bt_hci(r0, 0x0, 0x0) 20:47:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x26, 0xd01, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x28}}, 0x0) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) [ 1493.779624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x258) copy_file_range(r2, 0x0, r1, 0x0, 0x200f5ef, 0x0) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 20:47:46 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1493.834021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.836083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1493.845262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1493.852552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1493.881877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.929646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) 20:47:46 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c8", 0x1}], 0x1, 0x0, 0x0) 20:47:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/64, 0x40}], 0x1, 0x0, 0x0) 20:47:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, [@XFRMA_IF_ID={0x8}, @sec_ctx={0xc, 0x8, {0xfdb78a65d34dd003, 0x8, 0x0, 0x0, 0xff5d, "ec9b5526dae52bbb546700da2de2ed"}}]}, 0xd4}}, 0x0) 20:47:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x26, 0xd01, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x28}}, 0x0) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) 20:47:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x7}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x2}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:46 executing program 1: syz_io_uring_setup(0x401a, &(0x7f0000000340), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) [ 1494.280708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1494.284757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1494.291743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.314976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:46 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod$loop(0x0, 0x100, 0x1) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1494.356704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) 20:47:46 executing program 7: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x441, 0x0) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="c8", 0x1}], 0x1, 0x0, 0x0) 20:47:46 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x26, 0xd01, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x28}}, 0x0) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) [ 1494.394304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.413744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x80081270, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "be8d07e2e8defa224c2d2842b6dbb87fa110d6e2ed3901cb5165570e39285b3883eede899703730f7d9f205a983d2fc6ca2488844ddad326a28c7819cc472205", "f1deb8f40768f0a2e1fc39f053dde32e5edc02c2dffc88aa9603ef754376cf64"}) 20:47:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file1\x00', 0x0, 0x321f001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x1267, 0x0) [ 1494.452145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.552877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1494.560441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1494.725917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.771982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.775521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.822697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) 20:47:47 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed41000000080000dff4655fe0f4655fe0f4655f0000000000000400045539545c", 0x21, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x28, 0x26, 0xd01, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x28}}, 0x0) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) 20:47:47 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002000028020000028401", 0x63, 0x400}, {&(0x7f0000000140)="000000000000000000000000bdcefad9b49240cb1119d847d9dd66ca07bb7e3623", 0x21, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) 20:47:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 20:47:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x9}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod$loop(0x0, 0x100, 0x1) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:47:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x3}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1495.077048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1495.085255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1495.133744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.144799] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1495.210529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.213598] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 20:47:47 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000004f0200000000024f252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f0000000140)=ANY=[]) open_by_handle_at(r0, &(0x7f0000000140)=@shmem={0xc, 0x1, {0x1e}}, 0x0) 20:47:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:47:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) [ 1495.279461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.288352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:47 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002200)={&(0x7f0000002100), 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14}, 0x14}}, 0x0) 20:47:47 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) chown(&(0x7f0000000140)='./file1\x00', 0xee01, 0xee01) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x6628, 0x0) 20:47:47 executing program 1: io_setup(0x5, &(0x7f0000000080)=0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x5, r3}]) [ 1495.532665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=255812 comm=syz-executor.6 [ 1495.543136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=255812 comm=syz-executor.6 [ 1495.560473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=255812 comm=syz-executor.6 20:47:47 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000600)={0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000600)={0x1}) fcntl$lock(r1, 0x6, &(0x7f00000000c0)={0x2, 0x0, 0x40000000000000}) [ 1495.635018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.657521] wlan1: authenticate with 08:02:11:00:00:00 [ 1495.659406] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1495.678431] wlan1: authenticated [ 1495.679039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.679913] mac80211_hwsim hwsim155 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1495.685085] wlan1: associate with 08:02:11:00:00:00 (try 1/3) 20:47:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x4}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1495.790953] wlan1: associate with 08:02:11:00:00:00 (try 2/3) 20:47:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000700)={@remote, @empty}, 0x7) 20:47:48 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0xffffffff}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x00A'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x34}}, 0x0) [ 1495.894982] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1495.975403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1495.998906] wlan1: association with 08:02:11:00:00:00 timed out [ 1496.050749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.113704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.433267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.461235] wlan1: authenticate with 08:02:11:00:00:00 [ 1496.463142] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1496.482947] wlan1: authenticated [ 1496.484041] mac80211_hwsim hwsim155 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1496.486594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1496.488730] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1496.590919] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 1496.698113] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 1496.806922] wlan1: association with 08:02:11:00:00:00 timed out [ 1500.479928] Bluetooth: hci7: command 0x0409 tx timeout [ 1502.528117] Bluetooth: hci7: command 0x041b tx timeout [ 1504.574974] Bluetooth: hci7: command 0x040f tx timeout [ 1506.156485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.158685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.161679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1506.225049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1506.227049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.231224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1506.451203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.507049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.562050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.622913] Bluetooth: hci7: command 0x0419 tx timeout [ 1506.871135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1506.921491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:59 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x68, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4}]}, 0x18}}, 0x0) 20:47:59 executing program 1: syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x20, 0x85, 0x5, 0x5}, {0x1, 0x4, 0x8, 0x5}, {0x6, 0x97, 0x1, 0x3}]}) 20:47:59 executing program 5: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x31f, 0x0) 20:47:59 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x809c2, 0x0) r1 = fork() ptrace(0x10, r1) migrate_pages(r1, 0x4, &(0x7f0000000200)=0x7a52b9a7, &(0x7f0000000240)=0x1) getpgid(r1) move_pages(r1, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000040)=[0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x2) ptrace$cont(0xe, r1, 0x2, 0x3) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xfe, 0x1, 0x7, 0x40, 0x0, 0xffffffffffffffe1, 0x800, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2}, 0xa800, 0x6000000, 0xff, 0x6, 0x1000, 0x2, 0x4, 0x0, 0x3, 0x0, 0x4}, r1, 0xa, r0, 0xa) 20:47:59 executing program 7: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x30, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 20:47:59 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod$loop(0x0, 0x100, 0x1) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:47:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0xf}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x5}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:47:59 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/mem_sleep', 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="5480e5f273f2", 0x6, 0x0) [ 1507.103600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:59 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x5420, 0x0) 20:47:59 executing program 5: poll(&(0x7f00000000c0)=[{}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x7c}, 0x0) [ 1507.164972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.223252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:59 executing program 2: unshare(0x62040080) 20:47:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1507.265144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.323753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.382737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:47:59 executing program 7: fsmount(0xffffffffffffffff, 0x10, 0x0) 20:47:59 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)) [ 1507.536054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.586208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.735118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.778327] Process accounting resumed [ 1507.779972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 20:48:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 20:48:00 executing program 5: clock_settime(0x1ed5d7403, &(0x7f0000000500)={0x0, 0x989680}) 20:48:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="eb58906d6b66732e66617400020820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000005c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mknod$loop(0x0, 0x100, 0x1) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:48:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 20:48:00 executing program 2: unshare(0x62040080) 20:48:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x6}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1508.070979] wlan1: authenticate with 08:02:11:00:00:00 [ 1508.077000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.093257] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) 20:48:00 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0xffffff01}) [ 1508.112073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.177938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.200889] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1508.205602] wlan1: authenticated [ 1508.205795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.206930] mac80211_hwsim hwsim169 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 1508.211369] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 1508.235041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.267548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.268513] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 1508.271343] wlan1: associated 20:48:00 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x1, 0x6, @remote}, 0x14) syz_open_dev$tty1(0xc, 0x4, 0x2) futex(&(0x7f00000017c0), 0x4, 0x0, &(0x7f0000001800), &(0x7f0000001840)=0x1, 0x0) syz_read_part_table(0x7, 0x2, &(0x7f00000019c0)=[{&(0x7f0000001900)="c97b3052cc594f33671e19f85456c47c7caeff921071ca5320d0b91036a117192a235403d75ecaadf54b0287ffd26a5075a7", 0x32, 0x7}, {&(0x7f0000001940)="101becec6db3301368652cb10579c9630d64018ab40fca9d2805706bc3329c19249ab8dc19667217242b862e1e32dd5531e184eb9e92cbe942fb91b4758c4fce6d79f3bf482848e7aaee97fc6d7f386e69b945c6ce1d8c28e2e05f220dd9", 0x5e, 0x1200000000}]) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001b40)={0x4, 0x5}, 0x4) 20:48:00 executing program 2: unshare(0x62040080) 20:48:00 executing program 5: r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept$unix(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0) io_uring_setup(0xdc4, &(0x7f0000000400)={0x0, 0xe220, 0x8, 0x3}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 1508.394673] Process accounting resumed [ 1508.396108] Process accounting resumed 20:48:00 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1508.566718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:00 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1508.583976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1508.612663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.634674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.027227] Process accounting resumed 20:48:01 executing program 2: unshare(0x62040080) 20:48:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x25, 0xc21, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) 20:48:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x2}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:01 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) 20:48:01 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000600)) 20:48:01 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) [ 1509.223027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:01 executing program 0: syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x3, &(0x7f00000008c0)=[{&(0x7f0000000640)="b9", 0x1, 0x7fff}, {0x0}, {0x0, 0x0, 0x4}], 0xa10020, &(0x7f0000000940)={[], [{@pcr}, {@audit}]}) [ 1509.257244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1509.275309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.305605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.336713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.363474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f00000000c0)) 20:48:01 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000005900), 0xffffffffffffffff) [ 1509.403567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:01 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) [ 1509.519185] Process accounting resumed [ 1509.675299] Process accounting resumed [ 1509.680244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:01 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f00000002c0), 0x6, 0x0, 0x0, &(0x7f0000000340), 0x0) [ 1509.719067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.728691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:01 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 'w\x00Jn;m\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x161}) pread64(r0, &(0x7f00000000c0)=""/154, 0x9a, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) dup3(r1, r0, 0x0) [ 1509.782596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:02 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f00000028c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100828, &(0x7f00000001c0)={[{@journal_ioprio}]}) 20:48:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x3}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:02 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001240), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000002700), 0xffffffffffffffff) [ 1510.078355] EXT4-fs (sda): re-mounted. Opts: journal_ioprio=0x0000000000000000,,errors=continue [ 1510.092989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.100322] EXT4-fs (sda): re-mounted. Opts: journal_ioprio=0x0000000000000000,,errors=continue [ 1510.158823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.213384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.523621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.572485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000100)=0x1, 0x4) 20:48:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x9}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:02 executing program 2: r0 = syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x186e, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 20:48:02 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35393734373637303400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000026acba7564fc4e5aa2fa9146860a2012010000000c00000000000000def4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffdef4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000def4655fdef4655fdef4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000def4655fdef4655fdef4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000def4655fdef4655fdef4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000def4655fdef4655fdef4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000def4655fdef4655fdef4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="ed41000000080000def4655fdef4655fdef4655f00000000000002000400000000000800030000000af3010004000000000000000000000001000000200000000000000000000000000000000000000000000000000000000000000000000000000000006038208e000000000000000000000000000000000000000000000000ed8100001a040000def4655fdef4655fdef4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000024000000000000000000000000000000000000000000000000000000000000000000000000000000df03f451000000000000000000000000000000000000000000000000ffa1000026000000def4655fdef4655fdef4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3539373437363730342f66696c65302f66696c65300000000000000000000000000000000000000000000077da14d0000000000000000000000000000000000000000000000000ed8100000a000000def4655fdef4655fdef4655f00000000000001000800000000000800010000000af301000400000000000000000000000100000025000000000000000000000000000000000000000000000000000000000000000000000000000000d75d3bef210000000000000000000000000000000000000000000000ed81000028230000def4655fdef4655fdef4655f00000000000002001400000000000800010000000af30100040000000000000000000000050000002600000000000000000000000000000000000000000000000000000000000000000000000000000009541ef4000000000000000000000000000000000000000000000000ed81000064000000def4655fdef4655fdef4655f00000000000001000400000000000800010000000af30100040000000000000000000000010000002b000000000000000000000000000000000000000000000000000000000000000000000000000000f3d82c1b00"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) 20:48:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000240)=0x9, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000380)) 20:48:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x4}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="06", 0xff5d}], 0x1}, 0x0) 20:48:02 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xc, 0x6, @device_b}]}, 0x28}}, 0x0) [ 1510.683748] netlink: 'syz-executor.7': attribute type 11 has an invalid length. [ 1510.715909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:02 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) [ 1510.790643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.802785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') read(r0, &(0x7f00000004c0)=""/254, 0xfe) 20:48:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="f02234949c1175f21fe7b20f1215219986d4ea8f4ac4bd6a46634583b801f1c37f9b66c1960a9fca4d61710abd4d7fd934f6f12de491ece7f214c680f46a2be3065b64a102fcb26cc2b590871782d37703e6609f2e2ef708d4cf259b88ca8ced907af2971f74a9a3af625a58168fc278c14cade2d34bed0abf8e0e26ee162538ef28819456a8af75043e75bcfef68a6c63769d1315857ee99ae5fbc6f5a2e3c65817f174697b3bac68aa549710b561b55b5506424435d91e481ca994433bfe8bdef40a1cff15516f65b163597353b98313fd02fb014d50517716928f0ec61c2fe3a535667ddd5832ebb616818f", 0xed, 0x100000000}, {&(0x7f0000000080)="db664a0537764892c8913e077b839d2661b623c0f7eba408c2c676f0a32b950621ec7ba0c9df783f5301d20784b8be0f0a6994", 0x33, 0x10000}, {&(0x7f00000000c0)="91cc608fed2f78aaa0f6d7cfcf5b070ea35f81f1fa3dd5bea908abea8763fd260903079976ed9ab0e5a686e9be28e9f7cceb27ebfc7110b47676aaa5024dfbf9f5831abe1ba670e1f91c0a95dcc6d06fd767309d5cd942b97d8b54e89046a08efb467194", 0x64}, {&(0x7f0000000280)="f0402d43d6f9a445b3f9a39b6e774ec1e26e00ae97261d72f238fab83215a1937a4d49cbdee961533d690e90c75128a8f1054e6668b7a51f9a38a39b575d1f724c823ef7193f532917a95e53670693997eeebe3280168f6b7f2ae8fac820372d29bd948a0c3ecda1859c80a9b3aaf79805f5c8d971ea72cb2035cc0852b6f6ef3b1ee79faffb46cf4c938778fc14797fec74", 0x92, 0x8}], 0x851082, &(0x7f00000004c0)={[{':!#,'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) [ 1510.845696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1510.861067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="06", 0xff5d}], 0x1}, 0x0) [ 1510.918350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000600)={0x1}) ftruncate(r0, 0x0) 20:48:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x60}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x7, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 20:48:03 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) 20:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') read(r0, &(0x7f00000004c0)=""/254, 0xfe) [ 1511.157147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.207310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.226594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.277299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="06", 0xff5d}], 0x1}, 0x0) 20:48:03 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) 20:48:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="f02234949c1175f21fe7b20f1215219986d4ea8f4ac4bd6a46634583b801f1c37f9b66c1960a9fca4d61710abd4d7fd934f6f12de491ece7f214c680f46a2be3065b64a102fcb26cc2b590871782d37703e6609f2e2ef708d4cf259b88ca8ced907af2971f74a9a3af625a58168fc278c14cade2d34bed0abf8e0e26ee162538ef28819456a8af75043e75bcfef68a6c63769d1315857ee99ae5fbc6f5a2e3c65817f174697b3bac68aa549710b561b55b5506424435d91e481ca994433bfe8bdef40a1cff15516f65b163597353b98313fd02fb014d50517716928f0ec61c2fe3a535667ddd5832ebb616818f", 0xed, 0x100000000}, {&(0x7f0000000080)="db664a0537764892c8913e077b839d2661b623c0f7eba408c2c676f0a32b950621ec7ba0c9df783f5301d20784b8be0f0a6994", 0x33, 0x10000}, {&(0x7f00000000c0)="91cc608fed2f78aaa0f6d7cfcf5b070ea35f81f1fa3dd5bea908abea8763fd260903079976ed9ab0e5a686e9be28e9f7cceb27ebfc7110b47676aaa5024dfbf9f5831abe1ba670e1f91c0a95dcc6d06fd767309d5cd942b97d8b54e89046a08efb467194", 0x64}, {&(0x7f0000000280)="f0402d43d6f9a445b3f9a39b6e774ec1e26e00ae97261d72f238fab83215a1937a4d49cbdee961533d690e90c75128a8f1054e6668b7a51f9a38a39b575d1f724c823ef7193f532917a95e53670693997eeebe3280168f6b7f2ae8fac820372d29bd948a0c3ecda1859c80a9b3aaf79805f5c8d971ea72cb2035cc0852b6f6ef3b1ee79faffb46cf4c938778fc14797fec74", 0x92, 0x8}], 0x851082, &(0x7f00000004c0)={[{':!#,'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 20:48:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000002140)) 20:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') read(r0, &(0x7f00000004c0)=""/254, 0xfe) 20:48:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5450, 0x0) 20:48:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x5}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0xf}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1511.396896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x104e034, &(0x7f00000001c0)={[{@debug_want_extra_isize}]}) [ 1511.434271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x0, 0x2}, {}, {0x6}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) [ 1511.452704] EXT4-fs (sda): Invalid want_extra_isize 0 [ 1511.470061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_tables_names\x00') read(r0, &(0x7f00000004c0)=""/254, 0xfe) 20:48:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="06", 0xff5d}], 0x1}, 0x0) 20:48:03 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) [ 1511.489688] audit: type=1326 audit(1648846083.729:371): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=259118 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65ac53b19 code=0x0 [ 1511.491493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.524749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.546799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.830002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.850773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.881315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1511.901213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.304727] audit: type=1326 audit(1648846084.548:372): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=259118 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65ac53b19 code=0x0 20:48:04 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, 0x0, 0x40040) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x4, 0x70bd29, 0x0, {{}, {}, {0x4c, 0x18, {0xbf, @link='syz0\x00'}}}}, 0x68}}, 0x0) clone3(&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000007c0)=""/4096, 0x1000, &(0x7f00000017c0)=""/214, 0x0}, 0x58) 20:48:04 executing program 5: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) open_by_handle_at(0xffffffffffffffff, 0x0, 0x400000) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) write$rfkill(0xffffffffffffffff, 0x0, 0x0) 20:48:04 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="f02234949c1175f21fe7b20f1215219986d4ea8f4ac4bd6a46634583b801f1c37f9b66c1960a9fca4d61710abd4d7fd934f6f12de491ece7f214c680f46a2be3065b64a102fcb26cc2b590871782d37703e6609f2e2ef708d4cf259b88ca8ced907af2971f74a9a3af625a58168fc278c14cade2d34bed0abf8e0e26ee162538ef28819456a8af75043e75bcfef68a6c63769d1315857ee99ae5fbc6f5a2e3c65817f174697b3bac68aa549710b561b55b5506424435d91e481ca994433bfe8bdef40a1cff15516f65b163597353b98313fd02fb014d50517716928f0ec61c2fe3a535667ddd5832ebb616818f", 0xed, 0x100000000}, {&(0x7f0000000080)="db664a0537764892c8913e077b839d2661b623c0f7eba408c2c676f0a32b950621ec7ba0c9df783f5301d20784b8be0f0a6994", 0x33, 0x10000}, {&(0x7f00000000c0)="91cc608fed2f78aaa0f6d7cfcf5b070ea35f81f1fa3dd5bea908abea8763fd260903079976ed9ab0e5a686e9be28e9f7cceb27ebfc7110b47676aaa5024dfbf9f5831abe1ba670e1f91c0a95dcc6d06fd767309d5cd942b97d8b54e89046a08efb467194", 0x64}, {&(0x7f0000000280)="f0402d43d6f9a445b3f9a39b6e774ec1e26e00ae97261d72f238fab83215a1937a4d49cbdee961533d690e90c75128a8f1054e6668b7a51f9a38a39b575d1f724c823ef7193f532917a95e53670693997eeebe3280168f6b7f2ae8fac820372d29bd948a0c3ecda1859c80a9b3aaf79805f5c8d971ea72cb2035cc0852b6f6ef3b1ee79faffb46cf4c938778fc14797fec74", 0x92, 0x8}], 0x851082, &(0x7f00000004c0)={[{':!#,'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) 20:48:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x11}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:04 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:48:04 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x0, 0x2}, {}, {0x6}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 20:48:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@getsa={0x220, 0x12, 0x4, 0x70bd2a, 0x25dfdbfd, {@in=@broadcast, 0x4d4, 0x2, 0x6c}, [@algo_auth={0xf9, 0x1, {{'ghash-clmulni\x00'}, 0x588, "b25d0e3196d80aa3d24855d57ef011f30071cf0ecb32cbd4e5299214c7d0d05587a15c084dec72c41ad8585f722bfc25446f34d312ff9a9768633120b30ec01cfb38a62582642af71bdd350d2f37dd81d1df05d6958c1d919d654b34c85dda4afeff8b5c40926a66320e57c3c0a8ce82c8370c54e5e6e4d986f83b4ff75aafa8b17ff68c4cc794029393c8ae0e918cc35368c49152dcc2714d3ca85310da26c6cf605a56751c6252ea932c8246c8394650"}}, @replay_thresh={0x8, 0xb, 0x6b}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e22, @in=@remote}}, @policy_type={0xa, 0x10, {0x1}}, @mark={0xc, 0x15, {0x35075b, 0x2}}, @sec_ctx={0xc0, 0x8, {0xbc, 0x8, 0x1, 0x20, 0xb4, "6420f90f636ef6703b578d379196e1e7ca7927a16df931ef11b7206a86458c9c7890a1f7d9b9502996f2dd1b9ab57bac848d6a905c0ead8cf544b02de372a7da295049d0a487d145c9e8164fabd76f72ece5b6cecef4321f5e4ce71d9d8ed9bae3b945cdb8067c57917c4f116a4c5cb5982836922dbea914988c6728575bf06b5b3318b9b35751e7de51e8d5e9308b3e1ac108f2144acb6b6de4817ef082b24ad7e5a5bd2897490a3e1692368361494f9f1f1d7c"}}]}, 0x220}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1512.441638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.533108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:04 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000470008000f801", 0x17}, {0x0, 0x0, 0x10009ff}], 0x0, &(0x7f0000000040)={[{@shortname_winnt}]}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) 20:48:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=@updsa={0xf0, 0x1a, 0x9, 0x0, 0x0, {{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@dev, 0x0, 0x33}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 1512.879763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1512.882954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',posixacl,version=']) [ 1512.911580] audit: type=1326 audit(1648846085.155:373): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=259386 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65ac53b19 code=0x0 [ 1512.919415] 9pnet: Insufficient options for proto=fd [ 1512.953772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1513.009425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) 20:48:05 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040), 0x4) 20:48:05 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = fsopen(&(0x7f00000012c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001580)=""/134, 0x86) [ 1513.203476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="f02234949c1175f21fe7b20f1215219986d4ea8f4ac4bd6a46634583b801f1c37f9b66c1960a9fca4d61710abd4d7fd934f6f12de491ece7f214c680f46a2be3065b64a102fcb26cc2b590871782d37703e6609f2e2ef708d4cf259b88ca8ced907af2971f74a9a3af625a58168fc278c14cade2d34bed0abf8e0e26ee162538ef28819456a8af75043e75bcfef68a6c63769d1315857ee99ae5fbc6f5a2e3c65817f174697b3bac68aa549710b561b55b5506424435d91e481ca994433bfe8bdef40a1cff15516f65b163597353b98313fd02fb014d50517716928f0ec61c2fe3a535667ddd5832ebb616818f", 0xed, 0x100000000}, {&(0x7f0000000080)="db664a0537764892c8913e077b839d2661b623c0f7eba408c2c676f0a32b950621ec7ba0c9df783f5301d20784b8be0f0a6994", 0x33, 0x10000}, {&(0x7f00000000c0)="91cc608fed2f78aaa0f6d7cfcf5b070ea35f81f1fa3dd5bea908abea8763fd260903079976ed9ab0e5a686e9be28e9f7cceb27ebfc7110b47676aaa5024dfbf9f5831abe1ba670e1f91c0a95dcc6d06fd767309d5cd942b97d8b54e89046a08efb467194", 0x64}, {&(0x7f0000000280)="f0402d43d6f9a445b3f9a39b6e774ec1e26e00ae97261d72f238fab83215a1937a4d49cbdee961533d690e90c75128a8f1054e6668b7a51f9a38a39b575d1f724c823ef7193f532917a95e53670693997eeebe3280168f6b7f2ae8fac820372d29bd948a0c3ecda1859c80a9b3aaf79805f5c8d971ea72cb2035cc0852b6f6ef3b1ee79faffb46cf4c938778fc14797fec74", 0x92, 0x8}], 0x851082, &(0x7f00000004c0)={[{':!#,'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}]}) [ 1513.253032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/prev\x00') write$sndseq(r0, 0x0, 0x0) [ 1513.329710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x7}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1513.378784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.403944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.415351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.458201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.511590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.821736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.872055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1514.878926] Bluetooth: hci1: command 0x0406 tx timeout [ 1519.478744] kmemleak: 16569 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1526.445146] kmemleak: 4852 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:48:26 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = fsopen(&(0x7f00000012c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001580)=""/134, 0x86) 20:48:26 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x0, 0x2}, {}, {0x6}]}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) 20:48:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x9}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:26 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) 20:48:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x12}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x5}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1534.683712] audit: type=1326 audit(1648846106.927:374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=260085 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe65ac53b19 code=0x0 20:48:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0xf}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1534.728054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.730557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.736879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.749591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.753635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = fsopen(&(0x7f00000012c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001580)=""/134, 0x86) [ 1534.792576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.793925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.812224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.816174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.850564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.874714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = fsopen(&(0x7f00000012c0)='nfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) read(r0, &(0x7f0000001580)=""/134, 0x86) 20:48:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x6}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1534.960218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0xf}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 20:48:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x5}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1535.016497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x4}}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1535.062236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x14400}], 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x200f5ef, 0x0) [ 1535.092988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.131499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.139630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.152294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.165068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 20:48:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a={0x8, 0x2, 0x11, 0x7}, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 1535.191386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.198487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.208289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.213920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.242032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1535.315309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1548.835660] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88804e09bf00 (size 96): comm "softirq", pid 0, jiffies 4296201773 (age 23.217s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 02 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ff5ea9a8>] __skb_ext_alloc+0x19/0x80 [<000000002f94d1f0>] skb_ext_add+0x504/0x670 [<0000000097d110d6>] __alloc_skb+0x3c1/0x620 [<0000000031521b8d>] skb_copy+0x137/0x2f0 [<000000008a2a88dd>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13c0 [<00000000b843c750>] mac80211_hwsim_tx_frame+0x152/0x1e0 [<000000000a708bba>] mac80211_hwsim_beacon_tx+0x494/0x8f0 [<00000000a22ea482>] __iterate_interfaces+0x1f0/0x530 [<00000000a808723f>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 [<000000008a31b489>] mac80211_hwsim_beacon+0xcd/0x1c0 [<00000000c701fda8>] __hrtimer_run_queues+0x5e8/0xb50 [<000000006b34b19e>] hrtimer_run_softirq+0x148/0x310 [<00000000a1112bdc>] __do_softirq+0x1b8/0x867 [<00000000793bff54>] asm_call_irq_on_stack+0x12/0x20 [<00000000d5606b58>] do_softirq_own_stack+0x80/0xa0 [<000000003ae8b2c2>] irq_exit_rcu+0x110/0x1a0 BUG: memory leak unreferenced object 0xffff88801a8fb380 (size 96): comm "syz-executor.6", pid 260408, jiffies 4296201934 (age 23.056s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 07 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ff5ea9a8>] __skb_ext_alloc+0x19/0x80 [<000000002f94d1f0>] skb_ext_add+0x504/0x670 [<0000000097d110d6>] __alloc_skb+0x3c1/0x620 [<0000000031521b8d>] skb_copy+0x137/0x2f0 [<000000008a2a88dd>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13c0 [<00000000adcd31a1>] mac80211_hwsim_tx+0x574/0x1270 [<00000000da41935d>] ieee80211_tx_frags+0x598/0x9f0 [<0000000065a60d65>] __ieee80211_tx+0x1ad/0x610 [<000000000d977f7e>] ieee80211_tx+0x325/0x410 [<000000006478ea4a>] ieee80211_xmit+0x220/0x2a0 [<00000000d0dcb8b6>] __ieee80211_tx_skb_tid_band+0x20a/0x290 [<000000009909eb75>] ieee80211_scan_state_send_probe+0x366/0x900 [<000000002bfae129>] __ieee80211_start_scan+0x1779/0x1d10 [<00000000febb5788>] ieee80211_request_scan+0x4d/0xa0 [<00000000f5f9eda7>] ieee80211_scan+0x1d0/0x330 [<000000003f204010>] cfg80211_conn_scan+0x642/0xe20 BUG: memory leak unreferenced object 0xffff8880403fc880 (size 96): comm "softirq", pid 0, jiffies 4296201977 (age 23.014s) hex dump (first 32 bytes): 01 00 00 00 00 01 02 ff 03 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace: [<00000000ff5ea9a8>] __skb_ext_alloc+0x19/0x80 [<000000002f94d1f0>] skb_ext_add+0x504/0x670 [<0000000097d110d6>] __alloc_skb+0x3c1/0x620 [<0000000031521b8d>] skb_copy+0x137/0x2f0 [<000000008a2a88dd>] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13c0 [<00000000b843c750>] mac80211_hwsim_tx_frame+0x152/0x1e0 [<000000000a708bba>] mac80211_hwsim_beacon_tx+0x494/0x8f0 [<00000000a22ea482>] __iterate_interfaces+0x1f0/0x530 [<00000000a808723f>] ieee80211_iterate_active_interfaces_atomic+0x72/0x180 [<000000008a31b489>] mac80211_hwsim_beacon+0xcd/0x1c0 [<00000000c701fda8>] __hrtimer_run_queues+0x5e8/0xb50 [<000000006b34b19e>] hrtimer_run_softirq+0x148/0x310 [<00000000a1112bdc>] __do_softirq+0x1b8/0x867 [<00000000793bff54>] asm_call_irq_on_stack+0x12/0x20 [<00000000d5606b58>] do_softirq_own_stack+0x80/0xa0 [<000000003ae8b2c2>] irq_exit_rcu+0x110/0x1a0 BUG: leak checking failed VM DIAGNOSIS: 20:48:51 Registers: info registers vcpu 0 RAX=ffffffff83deb030 RBX=ffffffff84c32280 RCX=ffffffff83dd2fd8 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83deb3df RBP=fffffbfff0986450 RSP=ffffffff84c07e40 R8 =0000000000000001 R9 =ffff88806ce3c06b R10=ffffed100d9c780d R11=0000000000000001 R12=0000000000000000 R13=ffffffff85474088 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83deb03e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f09fca78000 CR3=000000000f676000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0a64656c69616620 676e696b63656863 YMM02=0000000000000000 0000000000000000 31636e75662e6e75 522e6c697475736f YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 b32be08e7e2e2590 b20082e928eac019 YMM09=0000000000000000 0000000000000000 0000000100000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0c0d0e0f08090a0b 0405060700010203 YMM11=0000000000000000 0000000000000000 2c307830202c3278 307b7b3d29303030 YMM12=0000000000000000 0000000000000000 bcdabe0966226c19 b68b1a945d1de230 YMM13=0000000000000000 0000000000000000 afe0310149dd945a 5c0aaeb173ece88c YMM14=0000000000000000 0000000000000000 4dbfb5a47fdb4b65 eb7ea358e0ce8287 YMM15=0000000000000000 0000000000000000 7b3871a6de6f47f3 e0e821bc2ba6119e info registers vcpu 1 RAX=ffffffff83deb030 RBX=ffff888008533280 RCX=ffffffff83dd2fd8 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83deb3df RBP=ffffed10010a6650 RSP=ffff88800857fe78 R8 =0000000000000001 R9 =ffff88806cf3c06b R10=ffffed100d9e780d R11=0000000000000001 R12=0000000000000001 R13=ffffffff85474088 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83deb03e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe2138cfe0 CR3=0000000017ce6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 656a626f20646563 6e6572656665726e YMM02=0000000000000000 0000000000000000 3a29363920657a69 7328203030666239 YMM03=0000000000000000 0000000000000000 65696666696a202c 3020646970202c22 YMM04=0000000000000000 0000000000000000 20200a2e2e2e2e2e 2e2e2e2e2e2e2e2e YMM05=0000000000000000 0000000000000000 2030302030302030 3020323020666620 YMM06=0000000000000000 0000000000000000 3020313020202020 0a3a297365747962 YMM07=0000000000000000 0000000000000000 78656820200a2973 3731322e33322065 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000