r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x40904) ftruncate(r0, 0x1000003) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x0) read$rfkill(r2, &(0x7f0000000240), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000013c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r2, &(0x7f0000000100)={0xd3baa6822cbcb58e, 0x32, 0x9}, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x18, 0x0, 0x23456}, 0x8010000) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x3}) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000001700)=@v3={0x3000000, [{0x3, 0xa31}, {0x6, 0x5}]}, 0x18, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="7000ff03", @ANYRES16=0x0, @ANYBLOB="01002cfd76caaf059c84120000000c000000000000000007000040e6ef8005000700000000000a00020019347992c64d000005000700090000000500100004000000040004000a000800080211000000000005000100020000001000f0800400040005000600010000005f4b092723f9fcd50699f448b014458f"], 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x200040f0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f00000014c0)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321202e2f6367726f75702f6367726f83702e70726f63730a"], 0x19)